CVE-2026-10617 | nextlevelbuilder GoClaw up to 3.11.3 Webhook Verification internal/http/auth.go resolveAuth missing authentication (Issue 1134)

A vulnerability was found in nextlevelbuilder GoClaw up to 3.11.3. It has been classified as critical. This affects the function resolveAuth of the file internal/http/auth.go of the component Webhook Verification Handler. The manipulation leads to missing authentication.

This vulnerability is referenced as CVE-2026-10617. Remote exploitation of the attack is possible. Furthermore, an exploit is available.

The project tagged the reported issue as bug.