Executive brief
GoClaw is an AI agent platform used to deploy and manage teams of autonomous agents. A security flaw in the team task management component allows an authenticated team member to interfere with tasks assigned to other members. An attacker could mark a teammate's active task as complete and replace the legitimate results with their own data, potentially corrupting business workflows, automated approvals, and audit trails.
Technical details
An authorization bypass exists in the `TeamTasksTool.executeComplete` function within `internal/tools/team_tasks_lifecycle.go`. The vulnerability stems from two logic flaws: first, the `executeComplete` function attempts to claim a task but ignores any resulting errors (such as the task already being owned); second, the underlying `CompleteTask` storage operation only validates the task ID, status, and team/tenant IDs without verifying that the requesting agent is the actual owner of the task. A remote attacker with low-privileged authenticated access can exploit this by invoking the `team_tasks` tool with the `complete` action for a known `task_id`. This allows the attacker to overwrite task results, which can disrupt downstream agent orchestration and compromise the integrity of the task audit history.
Affected products
- nextlevelbuilder GoClaw up to 3.11.3
Timeline
- 2026-06-02: disclosed: Vulnerability reported via GitHub issue and VulDB
- 2026-06-02: advisory: NVD published CVE-2026-10616