Issues · nextlevelbuilder/goclaw · GitHub

Labels Milestones New issue

Bug: read_document fails for XLSX because spreadsheet MIME is routed through unsupported provider document/image paths

#1229

· otrumb opened

on Jun 15, 2026

[Security] Operator-accessible `exec` tool can leak `GOCLAW_*` secrets via `jq` `$ENV` despite `env_dump` protections

#1227

· YLChen-007 opened

on Jun 14, 2026

[Security] Authenticated operator can exfiltrate `GOCLAW_GATEWAY_TOKEN` through auto-approved `jq` execution

#1226

· YLChen-007 opened

on Jun 14, 2026

Ollama provider shouldn't restrict api_base

#1222

· bclermont opened

on Jun 13, 2026

[Security] GoClaw `web_fetch` SSRF protection bypass via special-use IPv4 range `198.18.0.0/15`

#1218

· YLChen-007 opened

on Jun 12, 2026

[Security] Cross-Agent Authorization Bypass in `/v1/tools/invoke` Allows Unauthorized Cron Binding to Foreign Agents

#1217

· YLChen-007 opened

on Jun 12, 2026

[Security] GoClaw `exec` approval can be bypassed by reusing an `allow-always` basename with a different path-scoped executable

#1216

· YLChen-007 opened

on Jun 12, 2026

[Security] GoClaw `exec` Secure-CLI Gate Lets PowerShell `-EncodedCommand` Bypass Grant Enforcement

#1215

· YLChen-007 opened

on Jun 12, 2026

[Security] GoClaw `execApproval` Safe-Bin Trust Allows `sort -o` File Writes Without Human Approval

#1214

· YLChen-007 opened

on Jun 12, 2026

[Security] Exec approval allowlist basename collision allows operator-triggered host command execution via workspace binary

#1213

· YLChen-007 opened

on Jun 12, 2026

[Security] BusyBox-wrapped `allow-always` approval reuses trust across different shell payloads and bypasses exec re-approval

#1212

· YLChen-007 opened

on Jun 12, 2026

[Security] GoClaw `exec` allowlist policy bypass via shell chain execution

#1208

· YLChen-007 opened

on Jun 10, 2026

⚡