CVE-2026-41612 Visual Studio Code 相对路径遍历漏洞

import os # This script demonstrates the concept of the Relative Path Traversal vulnerability. # In a vulnerable version of VS Code, opening a file with a crafted path # could allow reading files outside the intended workspace. def simulate_vulnerable_file_open(workspace_path, file_path): """ Simulates a vulnerable file open function that does not sanitize paths. """ # The vulnerability lies here: directly joining paths without checking for traversal full_path = os.path.normpath(os.path.join(workspace_path, file_path)) # Check if the resolved path escapes the workspace (Vulnerability) if not full_path.startswith(os.path.normpath(workspace_path)): print(f"[!] SECURITY ALERT: Path traversal detected!") print(f"[!] Attempting to access: {full_path}") return full_path return full_path # Configuration workspace = "/home/user/vscode-project" # Malicious payload using relative path traversal payload = "../../../../../../etc/passwd" print(f"[*] Workspace: {workspace}") print(f"[*] Malicious Payload: {payload}") result = simulate_vulnerable_file_open(workspace, payload) if result: print(f"[+] Resolved Path: {result}") print("[+] In a real exploit, the content of this file would be disclosed.")