Medium severity6.3NVD Advisory· Published Jul 18, 2026· Updated Jul 21, 2026

CVE-2026-16119

Description

A vulnerability was found in nextlevelbuilder GoClaw up to 3.13.2. This affects the function RequestApproval of the file internal/tools/exec_approval.go of the component WebSocket Approval Endpoint. Performing a manipulation results in incorrect authorization. The attack is possible to be carried out remotely. The exploit has been made public and could be used.

Affected products

Nextlevelbuilder/Goclawllm-fuzzy
Range: <=3.13.2

Patches

Vulnerability mechanics

References

github.com/nextlevelbuilder/goclaw/issues/1212nvd
github.com/nextlevelbuilder/goclaw/issues/1212nvd
vuldb.com/cve/CVE-2026-16119nvd
vuldb.com/submit/856825nvd
vuldb.com/vuln/379828nvd
vuldb.com/vuln/379828/ctinvd

News mentions

No linked articles in our index yet.

cvss	0.410
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000