Goclaw
20 CVEs tracked. None of them is in CISA KEV.
This hub aggregates every CVE we track for Goclaw, a product in the ai ml space. Use it to gauge the current risk picture and drill into individual advisories.
Goclaw CVEs per month
| Month | CVEs |
|---|---|
| 2024-10 | 0 |
| 2024-11 | 0 |
| 2024-12 | 0 |
| 2025-01 | 0 |
| 2025-02 | 0 |
| 2025-03 | 0 |
| 2025-04 | 0 |
| 2025-05 | 0 |
| 2025-06 | 0 |
| 2025-07 | 0 |
| 2025-08 | 0 |
| 2025-09 | 0 |
| 2025-10 | 0 |
| 2025-11 | 0 |
| 2025-12 | 0 |
| 2026-01 | 0 |
| 2026-02 | 0 |
| 2026-03 | 0 |
| 2026-04 | 1 |
| 2026-05 | 0 |
| 2026-06 | 6 |
| 2026-07 | 13 |
| 2026-08 | 0 |
| 2026-09 | 0 |
Severity
How the 20 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.
- High3
- Medium17
Latest CVEs
The 15 most recently published vulnerabilities affecting Goclaw.
- CVE-2026-18038nextlevelbuilder GoClaw jq Handler tools_invoke.go ExecTool.Execute information disclosure4.3
- CVE-2026-16199nextlevelbuilder GoClaw credentialed_exec.go ExecTool.Execute improper authorization6.3
- CVE-2026-16124nextlevelbuilder GoClaw web_fetch web_shared.go isPrivateIP server-side request forgery6.3
- CVE-2026-16123nextlevelbuilder GoClaw Invoke Endpoint tools_invoke.go ToolsInvokeHandler.ServeHTTP authorization6.3
- CVE-2026-16122nextlevelbuilder GoClaw exec_approval.go matchesAllowlist authorization4.3
- CVE-2026-16121nextlevelbuilder GoClaw exec_approval.go isSafeBin improper authorization6.3
- CVE-2026-16120nextlevelbuilder GoClaw exec_approval.go extractBin name resolution6.3
- CVE-2026-16119nextlevelbuilder GoClaw WebSocket Approval Endpoint exec_approval.go RequestApproval authorization6.3
- CVE-2026-15627nextlevelbuilder GoClaw tool.go handleNavigate information disclosure4.3
- CVE-2026-15626nextlevelbuilder GoClaw ACP ToolBridge Workspace tool_bridge.go writeFile path traversal6.3
- CVE-2026-15625nextlevelbuilder GoClaw exec_approval.go ExecApprovalManager.CheckCommand incomplete blacklist6.3
- CVE-2026-15624nextlevelbuilder GoClaw invoke Endpoint create_video_byteplus.go bytePlusDownloadVideo server-side request forgery6.3
- CVE-2026-14716nextlevelbuilder GoClaw WebSocket RPC router.go MethodRouter.Handle authorization6.3
- CVE-2026-10617nextlevelbuilder GoClaw Webhook Verification auth.go resolveAuth missing authentication7.3
- CVE-2026-10616nextlevelbuilder GoClaw Team Task Completion team_tasks_lifecycle.go TeamTasksTool.executeComplete authorization4.3
Product grouping is registry-driven, with AI assist and human review. How it works