Issues · nextlevelbuilder/goclaw · GitHub

Labels Milestones New issue

[Security] GoClaw `exec` allowlist policy bypass via shell chain execution

#1208

· YLChen-007 opened

on Jun 10, 2026

[Security] Authenticated Browser Tool File Navigation Allows Local File Disclosure via `file://` URLs

#1207

· YLChen-007 opened

on Jun 10, 2026

[Security] GoClaw `execApproval` Safe-Bin Classification Bypasses Human Approval for `sort -o` File Writes and `grep -R` Recursive Reads

#1206

· YLChen-007 opened

on Jun 10, 2026

[Security] GoClaw `exec` allowlist shell-chain bypass allows execution of non-allowlisted commands

#1205

· YLChen-007 opened

on Jun 10, 2026

[Security] GoClaw `exec` approval `allow-always` trusts shell wrappers and lets later `sh -lc` payloads bypass re-approval

#1204

· YLChen-007 opened

on Jun 10, 2026

[Security] Authenticated `exec` approval bypass via `env` shell wrapper in GoClaw

#1203

· YLChen-007 opened

on Jun 10, 2026

[Security] Exec approval allowlist can be bypassed through transparent wrappers such as `env`

#1202

· YLChen-007 opened

on Jun 10, 2026

[Security] ACP ToolBridge workspace boundary bypass allows file write outside the configured workspace via dangling symlink alias

#1201

· YLChen-007 opened

on Jun 10, 2026

[Security] Exec approval allowlist can be bypassed through transparent wrapper drift in `POST /v1/tools/invoke`

#1200

· YLChen-007 opened

on Jun 10, 2026

[Security] Provider-returned video URLs in `create_video` bypass SSRF protections and allow internal network fetches

#1199

· YLChen-007 opened

on Jun 10, 2026

[Bug] DB system_configs tts.provider ignored at startup — TTS manager built before ApplySystemConfigs, falls back to Edge

#1198

· tiennm99 opened

on Jun 9, 2026

[Security] WebSocket API keys with `operator.approvals` scope can invoke unrelated operator-write RPC methods

#1188

· YLChen-007 opened

on Jun 4, 2026