Is CVE-2026-16199 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-16199 being exploited in the wild.

How severe is CVE-2026-16199?

Medium severity, with a CVSS score of 6.3, published 19 July 2026.

Which products and versions are affected?

Nextlevelbuilder GoClaw up to 3.13.3-beta.3.

Is there a fix for CVE-2026-16199?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-16199 attacked?

It is attacked over the network, in a software library.

Am I affected by CVE-2026-16199?

Check whether you run Nextlevelbuilder GoClaw at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-16199: nextlevelbuilder GoClaw authorization bypass in ExecTool.Execute

CVE-2026-16199 · Severity: medium · CVSS 6.3 · Published 2026-07-19

GoClaw is a platform for deploying AI agent teams with security isolation. A security flaw allows authenticated users to bypass restrictions on high-risk commands by hiding them inside PowerShell-encoded instructions. This could allow an unauthorized user to execute sensitive administrative tools or access cloud resources that should be protected by the system's security gates.

Technologies: Nextlevelbuilder GoClaw. Vendors: Nextlevelbuilder.

Quick answers

Is CVE-2026-16199 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-16199 being exploited in the wild.
How severe is CVE-2026-16199?: Medium severity, with a CVSS score of 6.3, published 19 July 2026.
Which products and versions are affected?: Nextlevelbuilder GoClaw up to 3.13.3-beta.3.
Is there a fix for CVE-2026-16199?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-16199 attacked?: It is attacked over the network, in a software library.
Am I affected by CVE-2026-16199?: Check whether you run Nextlevelbuilder GoClaw at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

An improper authorization vulnerability exists in the ExecTool.Execute function within goclaw/internal/tools/credentialed_exec.go. The system implements a 'Secure-CLI Gate' designed to intercept and validate high-risk binaries against a grant store. However, the wrapper-unwrapping logic in collectGateCandidates() only recognizes POSIX-style shells (sh, bash, etc.) and fails to identify PowerShell (pwsh, powershell) wrappers. An attacker with RoleOperator privileges can use the -EncodedCommand flag to hide restricted binaries (like 'gh') from the security scanner, leading to unauthorized execution of credentialed tools. Proof-of-concept exploits have been published.

Affected products

nextlevelbuilder GoClaw up to 3.13.3-beta.3

Timeline

2026-07-19: advisory: NVD publication date
2026-07-18: disclosed: Initial disclosure via VulDB and GitHub issues

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.