CVE-2026-7505

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-7505
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-7505.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-7505
Published
2026-04-30T22:00:16.529Z
Modified
2026-07-08T08:14:26.511752184Z
Severity
  • 5.5 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P CVSS Calculator
Summary
nextlevelbuilder GoClaw/GoClaw Lite RPC improper authorization
Details

A flaw has been found in nextlevelbuilder GoClaw and GoClaw Lite up to 3.8.5. This affects an unknown function of the component RPC Handler. This manipulation causes improper authorization. The attack may be initiated remotely. The exploit has been published and may be used. Upgrading to version 3.9.0 mitigates this issue. Patch name: 406022e79f4a18b3070a446712080571eff11e30. You should upgrade the affected component.

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/7xxx/CVE-2026-7505.json",
    "cna_assigner": "VulDB",
    "cwe_ids": [
        "CWE-266",
        "CWE-285"
    ],
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "introduced": "3.8.2"
                },
                {
                    "last_affected": "3.8.2"
                },
                {
                    "introduced": "3.8.4"
                },
                {
                    "last_affected": "3.8.4"
                },
                {
                    "introduced": "3.8.2"
                },
                {
                    "last_affected": "3.8.2"
                },
                {
                    "introduced": "3.8.4"
                },
                {
                    "last_affected": "3.8.4"
                }
            ],
            "source": "AFFECTED_FIELD"
        }
    ]
}
References

Affected packages

Git / github.com/nextlevelbuilder/goclaw

Affected ranges

Type
GIT
Repo
https://github.com/nextlevelbuilder/goclaw
Events
Introduced
1aa591d3146cfeb508a0866ff5157f80b2fb34f9
Fixed
406022e79f4a18b3070a446712080571eff11e30
Fixed
9f68f3ee0d6c2430f0a9f3965ef307443cae4752
Database specific 
{
    "extracted_events": [
        {
            "introduced": "3.8.0"
        },
        {
            "last_affected": "3.8.0"
        },
        {
            "introduced": "3.8.1"
        },
        {
            "last_affected": "3.8.1"
        },
        {
            "introduced": "3.8.3"
        },
        {
            "last_affected": "3.8.3"
        },
        {
            "introduced": "3.8.5"
        },
        {
            "last_affected": "3.8.5"
        }
    ],
    "source": [
        "AFFECTED_FIELD",
        "REFERENCES"
    ]
}

Affected versions

3.*
3.8.0
3.8.1
3.8.3
3.8.5

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-7505.json"