Executive brief
GoClaw, an AI agent platform, contains a security flaw that allows unauthorized users to gain full administrative access if the system is not configured with a specific security token. This could allow an attacker to remotely execute commands, access sensitive files, or modify system configurations. Additionally, the platform may accept fake messages from external services like Feishu or Pancake, potentially triggering unintended automated actions.
Technical details
A 'fail-open' vulnerability exists in the resolveAuth function within internal/http/auth.go of GoClaw. When the GOCLAW_GATEWAY_TOKEN environment variable is left empty or unconfigured, the system defaults to granting RoleAdmin privileges to any request lacking an Authorization header. This allows unauthenticated remote attackers to access sensitive endpoints such as /v1/tools/invoke and /v1/mcp/servers. Furthermore, webhook handlers for Feishu and Pancake fail to verify signatures or tokens if their respective secrets are unset, enabling the processing of forged payloads. The vulnerability affects versions 2.8.1 through 3.11.3.
Affected products
- nextlevelbuilder GoClaw 2.8.1 to 3.11.3
Timeline
- 2026-06-02: advisory: NVD publication date
- 2026-06-02: disclosed: Public disclosure of the vulnerability and PoC