Executive brief
GoClaw is a platform for deploying AI agent teams with security isolation. A security flaw allows authenticated users to bypass restrictions on high-risk commands by hiding them inside PowerShell-encoded instructions. This could allow an unauthorized user to execute sensitive administrative tools or access cloud resources that should be protected by the system's security gates.
Technical details
An improper authorization vulnerability exists in the ExecTool.Execute function within goclaw/internal/tools/credentialed_exec.go. The system implements a 'Secure-CLI Gate' designed to intercept and validate high-risk binaries against a grant store. However, the wrapper-unwrapping logic in collectGateCandidates() only recognizes POSIX-style shells (sh, bash, etc.) and fails to identify PowerShell (pwsh, powershell) wrappers. An attacker with RoleOperator privileges can use the -EncodedCommand flag to hide restricted binaries (like 'gh') from the security scanner, leading to unauthorized execution of credentialed tools. Proof-of-concept exploits have been published.
Affected products
- nextlevelbuilder GoClaw up to 3.13.3-beta.3
Timeline
- 2026-07-19: advisory: NVD publication date
- 2026-07-18: disclosed: Initial disclosure via VulDB and GitHub issues