Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization in the RequestApproval function of the WebSocket Approval Endpoint in execapproval.go. An attacker can gain unauthorized access to resources or perform actions with insufficient authorization by sending crafted...

EUVD-2026-45378

A vulnerability was found in nextlevelbuilder GoClaw up to 3.13.2. This affects the function RequestApproval of the file internal/tools/execapproval.go of the component WebSocket Approval Endpoint. Performing a manipulation results in incorrect authorization. The attack is possible to be carried...

CVE-2026-16119 nextlevelbuilder GoClaw WebSocket Approval Endpoint exec_approval.go RequestApproval authorization

A vulnerability was found in nextlevelbuilder GoClaw up to 3.13.2. This affects the function RequestApproval of the file internal/tools/execapproval.go of the component WebSocket Approval Endpoint. Performing a manipulation results in incorrect authorization. The attack is possible to be carried...

CVE-2026-16119: Incorrect Authorization

A vulnerability was found in nextlevelbuilder GoClaw up to 3.13.2. This affects the function RequestApproval of the file internal/tools/execapproval.go of the component WebSocket Approval Endpoint. Performing a manipulation results in incorrect authorization. The attack is possible to be carried...

PT-2026-60962

Name of the Vulnerable Software and Affected Versions nextlevelbuilder GoClaw versions prior to 3.13.3 Description An incorrect authorization issue exists in the WebSocket Approval Endpoint. A remote attacker can manipulate the RequestApproval function within the internal/tools/exec approval.go...