The vulnerability CVE-2026-16121 affects nextlevelbuilder GoClaw up to version 3.13.2. It stems from improper authorization checks in the isSafeBin function of internal/tools/exec_approval.go, allowing remote attackers to potentially bypass authorization controls. The exploit is publicly available, increasing the risk of exploitation. The CVSS 4.0 base score is 5.3 (medium), reflecting network attack vector, low complexity, no privileges required, no user interaction, and limited confidentiality, integrity, and availability impacts. No official fix or patch has been disclosed as of the publication date.

Successful exploitation of this vulnerability could allow remote attackers to bypass authorization controls in GoClaw, potentially leading to unauthorized actions within the affected function. The impact is rated medium with limited confidentiality, integrity, and availability effects. The existence of a public exploit increases the risk of exploitation, although no known active exploitation in the wild has been reported.

No official patch or remediation guidance is currently available. Users should monitor vendor advisories for updates and consider implementing compensating controls to restrict access to the affected functionality until a fix is released. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.