Executive brief
GoClaw, a platform for deploying AI agent teams, contains a security flaw in how it handles WebSocket permissions. An attacker with a restricted API key (such as one only allowed to approve tasks) can bypass these restrictions to perform unauthorized actions, like creating scheduled jobs. This allows a user with limited access to modify system settings and data they should not be able to reach.
Technical details
An incorrect authorization vulnerability exists in the `MethodRouter.Handle` function within `internal/gateway/router.go`. The WebSocket RPC implementation derives a coarse `RoleOperator` from specific API key scopes (like `operator.approvals`) during connection but fails to validate the specific granular scopes during subsequent RPC calls. Consequently, the system only checks if the derived role has access to a method, allowing an attacker with a limited-scope API key to invoke unrelated operator-write methods such as `cron.create`. This leads to unauthorized state mutation within the tenant environment. The vulnerability affects GoClaw versions up to 3.13.0-beta.2.
Affected products
- nextlevelbuilder GoClaw up to 3.13.0-beta.2
Timeline
- 2026-07-05: advisory: NVD/VulDB publication date