CVE-2026-16120 — nextlevelbuilder GoClaw exec_approval.go extractBin name resolution
A vulnerability was determined in nextlevelbuilder GoClaw up to 3.13.3-beta.3. This impacts the function matchesAllowlist/extractBin of the file internal/tools/exec_approval.go.…
Published: 2026-07-18 · CVSS: 5.3 · CVSS 4.0
A vulnerability was determined in nextlevelbuilder GoClaw up to 3.13.3-beta.3. This impacts the function matchesAllowlist/extractBin of the file internal/tools/exec_approval.go. Executing a manipulation can lead to incorrectly-resolved name. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7