CVE-2026-15627: Nextlevelbuilder Goclaw

Medium severity, CVSS 4.3. EPSS: 0.4% chance of exploitation in the next 30 days.

A vulnerability was identified in nextlevelbuilder GoClaw up to 3.13.3-beta.3. This vulnerability affects the function handleNavigate of the file pkg/browser/tool.go. Such manipulation of the argument args.targetUrl leads to information disclosure. The attack may be performed from remote. The exploit is publicly available and might be used.

Affected products

• Nextlevelbuilder Goclaw: version 3.13.3-beta.0 only; version 3.13.3-beta.1 only; version 3.13.3-beta.2 only; version 3.13.3-beta.3 only

Published 2026-07-14. Last modified 2026-07-14.