Vulnerabilities in nextlevelbuilder

22 results
Vexday analysis

NextLevelBuilder apresenta um panorama de risco recente e concentrado: todas as 21 vulnerabilidades conhecidas foram publicadas nos últimos 90 dias, sinalizando descobertas em massa ou divulgação coordenada. Embora nenhuma esteja sob ataque ativo (KEV) no momento, a ausência de críticas (CVSS) não diminui a urgência, pois a fraqueza dominante é CWE-285 (controle de acesso inadequado), um vetor historicamente explorado. O volume e a recência sugerem atenção imediata em testes de validação e patches.

CVE-2026-10219MEDIUMnextlevelbuilder GoClaw write_file Tool fsbridge.go FsBridge.WriteFile os command injectionEPSS 1.3%CVE-2026-10617MEDIUMnextlevelbuilder GoClaw Webhook Verification auth.go resolveAuth missing authenticationEPSS 0.4%CVE-2026-7505MEDIUMnextlevelbuilder GoClaw/GoClaw Lite RPC improper authorizationEPSS 0.4%CVE-2026-7596MEDIUMnextlevelbuilder ui-ux-pro-max-skill Slide Generator generate-slide.py data.get cross site scriptingEPSS 0.4%CVE-2026-16124MEDIUMnextlevelbuilder GoClaw web_fetch web_shared.go isPrivateIP server-side request forgeryEPSS 0.3%CVE-2026-15626MEDIUMnextlevelbuilder GoClaw ACP ToolBridge Workspace tool_bridge.go writeFile path traversalEPSS 0.3%CVE-2026-16119MEDIUMnextlevelbuilder GoClaw WebSocket Approval Endpoint exec_approval.go RequestApproval authorizationEPSS 0.3%CVE-2026-15625MEDIUMnextlevelbuilder GoClaw exec_approval.go ExecApprovalManager.CheckCommand incomplete blacklistEPSS 0.3%CVE-2026-15627MEDIUMnextlevelbuilder GoClaw tool.go handleNavigate information disclosureEPSS 0.2%CVE-2026-14716MEDIUMnextlevelbuilder GoClaw WebSocket RPC router.go MethodRouter.Handle authorizationEPSS 0.2%CVE-2026-7595MEDIUMnextlevelbuilder ui-ux-pro-max-skill Tailwind Config Generator tailwind_config_gen.py _format_plugins code injectionEPSS 0.2%CVE-2026-10218MEDIUMnextlevelbuilder GoClaw evolution_handlers.go auth improper authorizationEPSS 0.2%CVE-2026-16120MEDIUMnextlevelbuilder GoClaw exec_approval.go extractBin name resolutionEPSS 0.2%CVE-2026-10583MEDIUMnextlevelbuilder GoClaw TTS Configuration Endpoint tts_config.go import server-side request forgeryEPSS 0.2%CVE-2026-18038MEDIUMnextlevelbuilder GoClaw jq Handler tools_invoke.go ExecTool.Execute information disclosureEPSS 0.2%CVE-2026-16199MEDIUMnextlevelbuilder GoClaw credentialed_exec.go ExecTool.Execute improper authorizationEPSS 0.2%CVE-2026-16121MEDIUMnextlevelbuilder GoClaw exec_approval.go isSafeBin improper authorizationEPSS 0.2%CVE-2026-15624MEDIUMnextlevelbuilder GoClaw invoke Endpoint create_video_byteplus.go bytePlusDownloadVideo server-side request forgeryEPSS 0.2%CVE-2026-16123MEDIUMnextlevelbuilder GoClaw Invoke Endpoint tools_invoke.go ToolsInvokeHandler.ServeHTTP authorizationEPSS 0.2%CVE-2026-10217MEDIUMnextlevelbuilder GoClaw RoleAdmin Gateway tts_config.go handleSave privileges managementEPSS 0.2%