A command injection vulnerability was discovered in nextlevelbuilder GoClaw versions up to 3.11.3. The vulnerability affects the FsBridge.WriteFile function in the internal/sandbox/fsbridge.go file of the write_file tool component. Attackers can exploit this vulnerability remotely by manipulating the affected function to execute OS commands. The exploit has been publicly disclosed and is available for use. A pull request containing a fix has been submitted but is still awaiting acceptance.