CVE-2026-16122 – nextlevelbuilder GoClaw exec_approval.go matchesAllowlist authorization

CVE ID :CVE-2026-16122

Published : July 18, 2026, 3:17 p.m. | 22 minutes ago

Description :A security flaw has been discovered in nextlevelbuilder GoClaw up to 3.13.2. Affected by this vulnerability is the function extractBin/RequestApproval/matchesAllowlist of the file internal/tools/exec_approval.go. The manipulation results in incorrect authorization. The exploit has been released to the public and may be used for attacks.

Severity: 4.7 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…