# CVE-2026-15626: nextlevelbuilder GoClaw path traversal in ACP ToolBridge Workspace Handler

Source: https://junglewise.ai/threats/cve-2026-15626-nextlevelbuilder-goclaw-path-traversal-in-acp-toolbridge  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-07-14. Updated: 2026-07-14  
License: CC BY 4.0 with a link back

CVE-2026-15626 · Severity: medium · CVSS 6.3 · Published 2026-07-14

GoClaw is a platform for deploying AI agent teams with built-in security isolation. A vulnerability in the ACP ToolBridge component allows an AI agent to bypass its security sandbox and write files to the host system's restricted directories. This could allow an attacker to corrupt system files, modify data in other workspaces, or disrupt operations by overwriting critical configuration files.

Technologies: [Nextlevelbuilder GoClaw](https://junglewise.ai/threats/technologies/goclaw). Vendors: [Nextlevelbuilder](https://junglewise.ai/threats/vendors/nextlevelbuilder).

## Quick answers

**Is CVE-2026-15626 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-15626 being exploited in the wild.

**How severe is CVE-2026-15626?** Medium severity, with a CVSS score of 6.3, published 14 July 2026.

**Which products and versions are affected?** Nextlevelbuilder GoClaw 3.13.3-beta.3.

**Is there a fix for CVE-2026-15626?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-15626 attacked?** It is attacked over the network, in a software library.

**Am I affected by CVE-2026-15626?** Check whether you run Nextlevelbuilder GoClaw at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A path traversal vulnerability exists in the `writeFile` function within `internal/providers/acp/tool_bridge.go` of GoClaw. The root cause is a flaw in `resolvePath()` where `filepath.EvalSymlinks` is used for validation; if the function fails (e.g., on a dangling symlink), the code falls back to a lexical path check. An attacker can exploit this by first creating a dangling symlink pointing to a sensitive host location and then calling `fs/writeTextFile` on that path. Because the lexical check passes while the subsequent `os.WriteFile` follows the symlink, the attacker can write arbitrary content outside the sandbox. This requires the ability to issue ACP tool requests, typically available to an authenticated agent session.

## Affected products

- nextlevelbuilder GoClaw 3.13.3-beta.3

## Timeline

- 2026-07-14: disclosed: Vulnerability disclosed and CVE assigned

## References

- [https://github.com/nextlevelbuilder/goclaw/](https://github.com/nextlevelbuilder/goclaw/)
- [https://github.com/nextlevelbuilder/goclaw/issues/1201](https://github.com/nextlevelbuilder/goclaw/issues/1201)
- [https://github.com/nextlevelbuilder/goclaw/issues/1201](https://github.com/nextlevelbuilder/goclaw/issues/1201)
- [https://vuldb.com/cve/CVE-2026-15626](https://vuldb.com/cve/CVE-2026-15626)
- [https://vuldb.com/submit/855805](https://vuldb.com/submit/855805)
- [https://vuldb.com/vuln/378128](https://vuldb.com/vuln/378128)
- [https://vuldb.com/vuln/378128/cti](https://vuldb.com/vuln/378128/cti)

## Related threats

- [nextlevelbuilder GoClaw Information Disclosure in jq Handler](https://junglewise.ai/threats/cve-2026-18038-nextlevelbuilder-goclaw-information-disclosure-in-jq-handler)
- [nextlevelbuilder GoClaw authorization bypass in ExecTool.Execute](https://junglewise.ai/threats/cve-2026-16199-nextlevelbuilder-goclaw-authorization-bypass-in-exectool-execute)
- [nextlevelbuilder GoClaw SSRF in web_fetch component](https://junglewise.ai/threats/cve-2026-16124-nextlevelbuilder-goclaw-ssrf-in-web-fetch-component)
- [nextlevelbuilder GoClaw authorization bypass in ToolsInvokeHandler](https://junglewise.ai/threats/cve-2026-16123-nextlevelbuilder-goclaw-authorization-bypass-in)
- [nextlevelbuilder GoClaw authorization bypass in exec approval flow](https://junglewise.ai/threats/cve-2026-16122-nextlevelbuilder-goclaw-authorization-bypass-in-exec-approval)