Nextlevelbuilder vulnerabilities
We track 3 vulnerabilities in Nextlevelbuilder products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on June 2, 2026.
Latest Nextlevelbuilder vulnerabilities
- 7.3 High severity
GoClaw: Improper Authentication
A security vulnerability has been detected in nextlevelbuilder GoClaw up to 3.11.3. This affects the function resolveAuth of the file internal/http/auth.go of the component Webhook Verification Handler. The manipulation leads to missing authentication. Remote
- 7.3 High severity
GoClaw: Improper Neutralization of Special Elements used in a Command
A vulnerability was found in nextlevelbuilder GoClaw up to 3.11.3. This impacts the function FsBridge.WriteFile of the file internal/sandbox/fsbridge.go of the component write_file Tool. Performing a manipulation results in os command injection. The attack is
- 7.3 High severity
GoClaw: Incorrect Privilege Assignment
A flaw has been found in nextlevelbuilder GoClaw and GoClaw Lite up to 3.8.5. This affects an unknown function of the component RPC Handler. This manipulation causes improper authorization. The attack may be initiated remotely. The exploit has been published a