A flaw in the RPC Handler of nextlevelbuilder GoClaw and GoClaw Lite allows an attacker to manipulate an unknown function, leading to improper authorization. This weakness enables the bypass of access controls, potentially allowing remote actors to perform actions they should not be permitted to perform, which could compromise data confidentiality and system integrity.

The vulnerability affects nextlevelbuilder GoClaw and GoClaw Lite releases up to and including version 3.8.5. Both vendor products listed under nextlevelbuilder:GoClaw and nextlevelbuilder:GoClaw Lite are impacted; the issue is fixed in version 3.9.0.

The CVSS score of 6.9 indicates a moderate severity, and the description notes that the exploit is remote and published. The EPSS score is not available and the vulnerability is not listed in KEV, but the existence of a public exploit suggests a realistic threat of unauthorized access.