Skip to content
Threat Feed
Subscribe

Vendor

Nextlevelbuilder

2 briefs RSS
high advisory

GoClaw OS Command Injection Vulnerability (CVE-2026-10219)

nextlevelbuilder GoClaw up to 3.11.3 is vulnerable to remote OS command injection via manipulation of the write_file Tool component's FsBridge.WriteFile function (CVE-2026-10219), with a public exploit available.

GoClaw <= 3.11.3 command-injection vulnerability webserver
2r 1t 1c
high advisory

nextlevelbuilder GoClaw and GoClaw Lite Improper Authorization Vulnerability

nextlevelbuilder GoClaw and GoClaw Lite versions up to 3.8.5 are vulnerable to improper authorization in the RPC Handler component, potentially allowing remote attackers to bypass security controls.

GoClaw +1 improper-authorization rpc-handler
2r 1t 1c