SEPTEMBER 8, 2026
Live Feed
Back to database
Case File

CVE-2026-16122

MEDIUM · CVSS 4.3 EPSS 0.20% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-07-18 · Last synced 2026-08-17

CyberRota Analysis

AI-Generated

A security vulnerability in nextlevelbuilder GoClaw versions up to 3.13.2 affects the authorization process within the extractBin/RequestApproval/matchesAllowlist function, leading to potential unauthorized access. This flaw poses a medium risk, as it could be exploited in attacks, given that details have been publicly released. Organizations using affected versions should prioritize patching this vulnerability to mitigate the risk of unauthorized actions.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit
GitHub PoC Links
github.com ↗ github.com ↗ github.com ↗

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-16122
Severity
MEDIUM
CVSS
4.3
EPSS
0.20%

Original NVD Description

A security flaw has been discovered in nextlevelbuilder GoClaw up to 3.13.2. Affected by this vulnerability is the function extractBin/RequestApproval/matchesAllowlist of the file internal/tools/exec_approval.go. The manipulation results in incorrect authorization. The exploit has been released to the public and may be used for attacks.