GHSA-wf8r-mxfr-xh87LowCVSS 6.3
A vulnerability was determined in nextlevelbuilder GoClaw 3.13.3-beta.3. This affects the...
🔗 CVE IDs covered (1)
📋 Description
A vulnerability was determined in nextlevelbuilder GoClaw 3.13.3-beta.3. This affects the function writeFile of the file internal/providers/acp/tool_bridge.go of the component ACP ToolBridge Workspace Handler. This manipulation causes path traversal. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.
🔗 References (9)
- https://nvd.nist.gov/vuln/detail/CVE-2026-15626
- https://github.com/nextlevelbuilder/goclaw/issues/1201
- https://github.com/nextlevelbuilder/goclaw/issues/1201#issuecomment-4760748680
- https://github.com/nextlevelbuilder/goclaw
- https://vuldb.com/cve/CVE-2026-15626
- https://vuldb.com/submit/855805
- https://vuldb.com/vuln/378128
- https://vuldb.com/vuln/378128/cti
- https://github.com/advisories/GHSA-wf8r-mxfr-xh87