The flaw resides in GoClaw's RoleAdmin Gateway component, specifically in the handleSave function of tts_config.go, which fails to enforce proper privilege checks on configuration changes. This allows an authenticated user to alter privileged settings and elevate privileges beyond intended boundaries. The weakness corresponds to CWE-266 (Improper Privilege Management) and CWE-269 (Improper Privilege Escalation).

Affected vendor: nextlevelbuilder GoClaw up to and including version 3.11.3. The vulnerability is triggered by interacting with the RoleAdmin Gateway module that handles configuration saving. No other products or versions are currently listed as affected.

The CVSS score of 5.3 indicates moderate severity. EPSS is not available, but the vulnerability has an openly published exploit and remote exploitation is feasible. The attack likely involves sending crafted HTTP requests to the RoleAdmin Gateway endpoint to trigger the handleSave function without proper privilege validation, enabling an attacker to gain elevated permissions or modify system configuration. The vulnerability is not listed in CISA KEV.