CVE-2026-14716 | nextlevelbuilder GoClaw up to 3.13.0-beta.2 WebSocket RPC router.go MethodRouter.Handle authorization (Issue 1188)

A vulnerability described as critical has been identified in nextlevelbuilder GoClaw up to 3.13.0-beta.2. Impacted is the function MethodRouter.Handle of the file internal/gateway/router.go of the component WebSocket RPC Handler. Such manipulation leads to incorrect authorization.

This vulnerability is traded as CVE-2026-14716. The attack may be launched remotely. Furthermore, there is an exploit available.

The project was informed of the problem early through an issue report.