CVE-2026-18038

MEDIUM

nextlevelbuilder GoClaw jq Handler tools_invoke.go ExecTool.Execute information disclosure

Title source: cna
STIX 2.1

Description

A flaw has been found in nextlevelbuilder GoClaw up to 3.13.2. Affected by this vulnerability is the function ExecTool.Execute of the file goclaw/internal/http/tools_invoke.go of the component jq Handler. Executing a manipulation can lead to information disclosure. The attack can be launched remotely. The exploit has been published and may be used. This patch is called 1230. It is advisable to implement a patch to correct this issue.

References (7)

Core 7
Core References
Vdb Entry, Technical Description vdb-entry technical-description
VDB-383813 | nextlevelbuilder GoClaw jq Handler tools_invoke.go ExecTool.Execute information disclosure
https://vuldb.com/vuln/383813
Signature, Permissions Required signature permissions-required
VDB-383813 | CTI Indicators (IOB, IOC, TTP, IOA)
https://vuldb.com/vuln/383813/cti
Third Party Advisory third-party-advisory
CVE-2026-18038 | CVE Analysis and Report
https://vuldb.com/cve/CVE-2026-18038
Third Party Advisory third-party-advisory
Submit #862538 | nextlevelbuilder GoClaw 3.13.2 Exposure of Sensitive Information to an Unauthorized Actor (CWE-200)
https://vuldb.com/submit/862538

Scores

CVSS v3 4.3
EPSS 0.0022
EPSS Percentile 12.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact partial

Details

CWE
CWE-200 CWE-284
Status published
Products (3)
nextlevelbuilder/GoClaw 3.13.0
nextlevelbuilder/GoClaw 3.13.1
nextlevelbuilder/GoClaw 3.13.2
Published Jul 28, 2026
Tracked Since Jul 28, 2026