CVE-2025-52638 HCL AION容器root权限执行漏洞

# CVE-2025-52638 PoC - 检查容器是否以root权限运行 # Usage: python poc.py import subprocess import os def check_container_root_privilege(): """ Check if containers are running with root privileges This PoC demonstrates the vulnerability in HCL AION """ print("[*] Checking HCL AION container privileges...") # Check current user ID in container uid = os.getuid() euid = os.geteuid() print(f"[+] Current UID: {uid}") print(f"[+] Effective UID: {euid}") if uid == 0 or euid == 0: print("[!] VULNERABLE: Container is running as root!") print("[!] This indicates CVE-2025-52638 is present") return True else: print("[+] SAFE: Container is running as non-root user") return False def check_hcl_aion_containers(): """ List HCL AION related containers and check their privilege status """ try: result = subprocess.run( ['docker', 'ps', '--filter', 'name=aion', '--format', '{{.Names}}:{{.Image}}'], capture_output=True, text=True ) containers = result.stdout.strip().split('\n') for container in containers: if container: name, image = container.split(':') print(f"[*] Found AION container: {name} (Image: {image})") # Check if running as root user_result = subprocess.run( ['docker', 'exec', name, 'id'], capture_output=True, text=True ) print(f"[+] Container user: {user_result.stdout.strip()}") except Exception as e: print(f"[-] Error checking containers: {e}") if __name__ == "__main__": print("=" * 60) print("CVE-2025-52638 PoC - HCL AION Container Root Privilege Check") print("=" * 60) is_vulnerable = check_container_root_privilege() check_hcl_aion_containers() if is_vulnerable: print("\n[!] Recommendation: Reconfigure container to run as non-root user") print("[!] Add 'USER' instruction in Dockerfile or use gosu/sudo")