The vulnerability resides in the goals.ts route of the Unsigned Scheduled Callback component of United by AI’s DroidClaw. The particular request payload or endpoint path used for manipulation is not explicitly described, so the attack vector is inferred from the remote exploitation mention. Manipulating an unspecified input triggers an authorization bypass, allowing an unauthenticated or low‑privilege user to access or modify resources that should be restricted. The weakness is an authorization bypass (CWE‑285) combined with implicit trust (CWE‑639). The CVSS score is 2.3, indicating low overall severity, yet the attack is remotely exploitable and described as high‑complexity, meaning an attacker must invest significant effort and knowledge to locate and abuse the flaw.

The affected vendor is United by AI, product DroidClaw, up to version 0.5.3. The issue is present in the server/src/routes/goals.ts file within the Unsigned Scheduled Callback component. No other products or versions are listed.

The CVSS score of 2.3 suggests low overall severity, but the specified remote exploitation path and the public availability of an exploit elevate the potential impact. The remote exploitation path is inferred from the description's mention of remote exploitation, although the exact mechanics remain unspecified. The EPSS score of less than 1 % indicates a very low estimate of exploitation probability, yet the vulnerability is not listed in CISA’s KEV catalogue. Remote attackers with sufficient resources could target the endpoint to bypass authorization; however, the high complexity of the exploit and its known difficulty make successful usage unlikely.