CVE-2026-33572 OpenClaw权限不当导致信息泄露漏洞

#!/bin/bash # PoC for CVE-2026-33572: OpenClaw Insecure File Permissions # Description: This script checks for world-readable OpenClaw transcript files. TARGET_DIR="/var/lib/openclaw/transcripts" # Default hypothetical path if [ -d "$TARGET_DIR" ]; then echo "[+] Checking for insecure JSONL transcript files in $TARGET_DIR..." # Find files readable by others INSECURE_FILES=$(find "$TARGET_DIR" -type f -name "*.jsonl" -perm -o=r) if [ -n "$INSECURE_FILES" ]; then echo "[!] Vulnerability detected! The following files are readable by others:" echo "$INSECURE_FILES" echo "[i] An attacker with local access can read these files to extract secrets." else echo "[-] No insecure files found." fi else echo "[-] OpenClaw transcript directory not found at $TARGET_DIR" fi