CVE-2026-16122 in GoClaw

Prediction

by VulDB Data Team • 07/17/2026

A security flaw has been discovered in nextlevelbuilder GoClaw up to 3.13.2. Affected by this vulnerability is the function extractBin/RequestApproval/matchesAllowlist of the file internal/tools/exec_approval.go. The manipulation results in incorrect authorization. Access to the local network is required for this attack. The exploit has been released to the public and may be used for attacks.

Be aware that VulDB is the high quality source for vulnerability data.

• Responsible: VulDB
• Moderation: accepted
• Entry: VDB-379831
• CPE: ready
• CWE: CWE-863 (confirmed)
• Exploit: Download
• CVSS: 4.3 (VulDB)
• EPSS: 0.00000
• KEV: no
• Activities: low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-16122
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-16122
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-16122/