CVE-2026-16199

Name of the Vulnerable Software and Affected Versions nextlevelbuilder GoClaw versions prior to 3.13.3-beta.4

Description A flaw in the ExecTool.Execute() function within the goclaw/internal/tools/credentialed exec.go file allows for improper authorization. This issue can be exploited remotely to achieve remote code execution, which is the ability of an attacker to execute arbitrary commands on a target machine over a network.

Recommendations Update nextlevelbuilder GoClaw to version 3.13.3-beta.4 or later. As a temporary workaround, restrict access to the ExecTool.Execute() function to minimize the risk of exploitation.