Search results

Session auto-compaction can fail to prevent context overflow in long-lived chats; add overflow-triggered compact+retry and manual compact controls

Status: Open.

#1136 In nextlevelbuilder/goclaw;

· oops-long opened on May 9, 2026

[Security] Unauthenticated HTTP Admin Access and Forged Webhook Execution When GoClaw Secrets Are Left Unconfigured

Status: Open.

#1134 In nextlevelbuilder/goclaw;

· YLChen-007 opened on May 9, 2026

[Security] GoClaw team task completion authorization bypass allows a team member to complete another member's in-progress task

Status: Open.

#1133 In nextlevelbuilder/goclaw;

· YLChen-007 opened on May 9, 2026

[Security] Server-Side Request Forgery (SSRF) via Unvalidated TTS Provider API Base Configuration

Status: Open.

#1132 In nextlevelbuilder/goclaw;

· YLChen-007 opened on May 9, 2026

Duplicate write_file Result — Take Action

Status: Open.

#1131 In nextlevelbuilder/goclaw;

· echo-music opened on May 9, 2026

tracing: announce-run trace + agent span store output_preview = "..." (3 chars), full text only on llm_call span

Status: Open.

#1130 In nextlevelbuilder/goclaw;

· mozaa-solana opened on May 8, 2026

MCP bridge drops SenderID → cron / write_file unusable in Telegram groups (Claude CLI provider)

Status: Open.

#1126 In nextlevelbuilder/goclaw;

· tiennm99 opened on May 8, 2026

fix(providers): increase HTTP connection pool for embedding provider

Status: Open.

#1124 In nextlevelbuilder/goclaw;

· ronaldtangg opened on May 7, 2026

Dashboard refuses to restore backups

Status: Open.

#1122 In nextlevelbuilder/goclaw;

· filipenf opened on May 7, 2026

[Security] Arbitrary Command Execution inside Sandbox via FsBridge Command Injection

Status: Open.

#1121 In nextlevelbuilder/goclaw;

· YLChen-007 opened on May 7, 2026

[Security] Evolution Suggestion Authorization Bypass — Unauthorized Modification of Admin-Only Suggestion State leading to Tool Disabled

Status: Open.

#1120 In nextlevelbuilder/goclaw;

· YLChen-007 opened on May 7, 2026

[Security] Agent Config Bypass via V3-Flags — Viewer Mutates Admin-Only Agent Config

Status: Open.

#1119 In nextlevelbuilder/goclaw;

· YLChen-007 opened on May 7, 2026