CVE-2026-15626

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-15626

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-15626.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-15626

Published

2026-07-14T02:15:09.506Z

Modified

2026-07-17T03:41:50.921585504Z

Severity

2.1 (Low) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P CVSS Calculator

Summary

nextlevelbuilder GoClaw ACP ToolBridge Workspace tool_bridge.go writeFile path traversal

Details

A vulnerability was determined in nextlevelbuilder GoClaw 3.13.3-beta.3. This affects the function writeFile of the file internal/providers/acp/tool_bridge.go of the component ACP ToolBridge Workspace Handler. This manipulation causes path traversal. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.

Database specific

{
    "cwe_ids": [
        "CWE-22"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/15xxx/CVE-2026-15626.json",
    "cna_assigner": "VulDB"
}

References

Affected packages

Git / github.com/nextlevelbuilder/goclaw

Affected ranges

Type

GIT

Repo

https://github.com/nextlevelbuilder/goclaw

Events

Introduced

7484d0ec74208641f4c623f983e5f820a1142a41

Last affected

7484d0ec74208641f4c623f983e5f820a1142a41

Database specific

{
    "extracted_events": [
        {
            "introduced": "3.13.3-beta.3"
        },
        {
            "last_affected": "3.13.3-beta.3"
        }
    ],
    "source": "AFFECTED_FIELD"
}

Affected versions

3.*

3.13.3-beta.3

v3.*

v3.13.3-beta.3

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-15626.json"