CVE-2026-33246 NATS-Server 信息头欺骗漏洞

import asyncio import nats # This script demonstrates how a client processes the 'Nats-Request-Info' header. # In a vulnerable environment, the header content could be spoofed by an untrusted leaf node. async def main(): nc = await nats.connect("nats://localhost:4222") async def message_handler(msg): # Extract the header that might be spoofed request_info = msg.header.get('Nats-Request-Info', 'Not Present') subject = msg.subject data = msg.data.decode() print(f"Received message on subject: {subject}") print(f"Payload: {data}") print(f"Nats-Request-Info Header: {request_info}") # Vulnerable Logic: Client trusts the header blindly if request_info: print(f"[!] Trusted User Info: {request_info}") # Client makes decisions based on this unverified info await nc.subscribe("updates.", cb=message_handler) print("Listening for messages...") try: await asyncio.Future() except asyncio.CancelledError: pass finally: await nc.close() if __name__ == '__main__': asyncio.run(main())