Medium severity6.3NVD Advisory· Published Jun 1, 2026· Updated Jun 1, 2026

CVE-2026-10217

Description

A flaw has been found in nextlevelbuilder GoClaw up to 3.11.3. The impacted element is the function handleSave of the file internal/http/tts_config.go of the component RoleAdmin Gateway. This manipulation causes improper privilege management. Remote exploitation of the attack is possible. The exploit has been published and may be used. The project tagged the reported issue as bug.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Nextlevelbuilder/Goclawllm-fuzzy
Range: <=3.11.3

Patches

Vulnerability mechanics

References

github.com/nextlevelbuilder/goclaw/issues/1118nvd
vuldb.com/cve/CVE-2026-10217nvd
vuldb.com/submit/821937nvd
vuldb.com/vuln/367496nvd
vuldb.com/vuln/367496/ctinvd

News mentions

No linked articles in our index yet.

cvss	0.410
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000