CVE-2026-32035 OpenClaw权限绕过漏洞

// PoC Concept for CVE-2026-32035 // Demonstrates the missing senderIsOwner flag logic function processVoiceCommand(transcript, senderIsOwner) { // Vulnerability: senderIsOwner is undefined or not passed // and defaults to true inside agentCommand agentCommand(transcript); } function agentCommand(command) { // The vulnerable logic assumes ownership if flag is missing let isOwner = true; // Default insecure assumption if (isOwner) { console.log("[+] Access Granted to Owner Tools:"); executeGateway(command); executeCron(command); } else { console.log("[-] Access Denied"); } } // Exploit: Non-owner sends voice command processVoiceCommand("restart_gateway");