Search results

Ollama provider shouldn't restrict api_base

Status: Open.

#1222 In nextlevelbuilder/goclaw;

· bclermont opened on Jun 13, 2026

Setup page not scrollable on mobile

Status: Open.

#1219 In nextlevelbuilder/goclaw;

· bclermont opened on Jun 12, 2026

[Security] GoClaw web_fetch SSRF protection bypass via special-use IPv4 range 198.18.0.0/15

Status: Open.

#1218 In nextlevelbuilder/goclaw;

· YLChen-007 opened on Jun 12, 2026

[Security] Cross-Agent Authorization Bypass in /v1/tools/invoke Allows Unauthorized Cron Binding to Foreign Agents

Status: Open.

#1217 In nextlevelbuilder/goclaw;

· YLChen-007 opened on Jun 12, 2026

[Security] GoClaw exec approval can be bypassed by reusing an allow-always basename with a different path-scoped executable

Status: Open.

#1216 In nextlevelbuilder/goclaw;

· YLChen-007 opened on Jun 12, 2026

[Security] GoClaw exec Secure-CLI Gate Lets PowerShell -EncodedCommand Bypass Grant Enforcement

Status: Open.

#1215 In nextlevelbuilder/goclaw;

· YLChen-007 opened on Jun 12, 2026

[Security] GoClaw execApproval Safe-Bin Trust Allows sort -o File Writes Without Human Approval

Status: Open.

#1214 In nextlevelbuilder/goclaw;

· YLChen-007 opened on Jun 12, 2026

[Security] Exec approval allowlist basename collision allows operator-triggered host command execution via workspace binary

Status: Open.

#1213 In nextlevelbuilder/goclaw;

· YLChen-007 opened on Jun 12, 2026

[Security] BusyBox-wrapped allow-always approval reuses trust across different shell payloads and bypasses exec re-approval

Status: Open.

#1212 In nextlevelbuilder/goclaw;

· YLChen-007 opened on Jun 12, 2026

[Security] GoClaw exec allowlist policy bypass via shell chain execution

Status: Open.

#1208 In nextlevelbuilder/goclaw;

· YLChen-007 opened on Jun 10, 2026

[Security] Authenticated Browser Tool File Navigation Allows Local File Disclosure via file:// URLs

Status: Open.

#1207 In nextlevelbuilder/goclaw;

· YLChen-007 opened on Jun 10, 2026

[Security] GoClaw execApproval Safe-Bin Classification Bypasses Human Approval for sort -o File Writes and grep -R Recursive Reads

Status: Open.

#1206 In nextlevelbuilder/goclaw;

· YLChen-007 opened on Jun 10, 2026