CVE-2026-16129 identifies a vulnerability in princezuda SafestClaw up to version 4.2.4 affecting the ShellAction._validate_command function in src/safestclaw/actions/shell.py. The vulnerability results from incomplete blacklist enforcement in the built-in web interface, which could allow local attackers to bypass command restrictions. However, the maintainer notes that no practical exploit or proof-of-concept has been shown, and users can modify the shell allow list or remove the system entirely. The vulnerability is classified with low severity and no known exploits in the wild have been reported. No patch or remediation details are provided.

The vulnerability could allow a local attacker to bypass command restrictions due to incomplete blacklist validation, potentially leading to unauthorized command execution within the built-in web interface. However, the practical risk is uncertain as no proof-of-concept or confirmed exploit exists, and the maintainer suggests the threat to users is minimal or theoretical.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vulnerability requires local access and no practical exploit has been demonstrated, users should monitor official channels for updates. The maintainer suggests users can mitigate risk by modifying the shell allow list or removing the affected system component if feasible.