The vulnerability CVE-2026-16121 affects nextlevelbuilder GoClaw up to version 3.13.2. It is caused by improper authorization logic in the isSafeBin function of internal/tools/exec_approval.go, allowing remote attackers to bypass authorization controls. The CVSS 4.0 base score is 5.3 (medium), reflecting network attack vector, low attack complexity, no privileges required, no user interaction, and low impact on confidentiality, integrity, and availability. Although an exploit is publicly available, there is no vendor advisory or patch information currently provided.

Successful exploitation of this vulnerability allows remote attackers to bypass authorization checks in GoClaw, potentially enabling unauthorized actions within the affected function. The impact is rated medium based on CVSS 4.0 with limited confidentiality, integrity, and availability impact. There is no evidence of widespread exploitation in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or workaround has been published, users should monitor vendor communications for updates. Until a patch is available, consider restricting network access to the affected service to trusted sources to reduce exposure.