CVE-2026-7505 nextlevelbuilder GoClaw/GoClaw Lite RPC improper authorization
- Exploited in the wild
- Not known
- Fix
- None listed
What is CVE-2026-7505?
CVE-2026-7505 is a medium-severity vulnerability in nextlevelbuilder GoClaw, published on 30 Apr 2026.
Official description
A flaw has been found in nextlevelbuilder GoClaw and GoClaw Lite up to 3.8.5. This affects an unknown function of the component RPC Handler. This manipulation causes improper authorization. The attack may be initiated remotely. The exploit has been published and may be used. Upgrading to version 3.9.0 mitigates this issue. Patch name: 406022e79f4a18b3070a446712080571eff11e30. You should upgrade the affected component.
Which versions are affected by CVE-2026-7505?
How do I fix CVE-2026-7505?
No fix has been published for CVE-2026-7505 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-7505 being exploited?
There is no known exploitation of CVE-2026-7505 in the wild and no public exploit code.
Sources
Also known as GHSA-p2qq-m885-cm42.