Description
A security vulnerability has been detected in nextlevelbuilder GoClaw up to 3.15.0-beta.32. This affects the function CheckSSRF/isPrivateIP of the file internal/tools/web_shared.go of the component web_fetch. Such manipulation leads to server-side request forgery. The attack can be launched remotely. The exploit has been disclosed publicly and may be used. Upgrading to version 3.15.0-beta.33 is able to mitigate this issue. The name of the patch is 12a0168271827650ddb0026d6277fbadf3dcf3ea. Upgrading the affected component is recommended.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| nextlevelbuilder | GoClaw | 3.15.0-beta.0, 3.15.0-beta.1, 3.15.0-beta.2, 3.15.0-beta.3, 3.15.0-beta.4, 3.15.0-beta.5, 3.15.0-beta.6, 3.15.0-beta.7, 3.15.0-beta.8, 3.15.0-beta.9, 3.15.0-beta.10, 3.15.0-beta.11, 3.15.0-beta.12, 3.15.0-beta.13, 3.15.0-beta.14, 3.15.0-beta.15, 3.15.0-beta.16, 3.15.0-beta.17, 3.15.0-beta.18, 3.15.… | 3.15.0-beta.33 |
References
- VDB-379833 | nextlevelbuilder GoClaw web_fetch web_shared.go isPrivateIP server-side request forgery vdb-entry technical-description
- VDB-379833 | CTI Indicators (IOB, IOC, IOA) signature permissions-required
- CVE-2026-16124 | CVE Analysis and Report third-party-advisory
- Submit #856858 | nextlevelbuilder GoClaw 3.13.3-beta.3 Server-Side Request Forgery (CWE-918) third-party-advisory
- https://github.com/nextlevelbuilder/goclaw/issues/1218 exploit issue-tracking
- https://github.com/nextlevelbuilder/goclaw/pull/1269 issue-tracking patch
- https://github.com/nextlevelbuilder/goclaw/commit/12a0168271827650ddb0026d6277fbadf3dcf3ea patch
- https://github.com/nextlevelbuilder/goclaw/releases/tag/v3.15.0-beta.33 patch
- https://github.com/nextlevelbuilder/goclaw/ product