AI Security AI安全 7h ago Updated 1h ago 更新于 1小时前 42

Hackers Exploit Windmill Flaw to Read Arbitrary Server Files Without Authentication 黑客利用Windmill漏洞无需认证即可读取任意服务器文件

Active exploitation of CVE-2026-29059, a path traversal vulnerability in the open-source developer platform Windmill, allows unauthorized reading of arbitrary server files. The vulnerability impacts the "get_log_file" endpoint and can lead to full system compromise if the SUPERADMIN_SECRET environment variable is exposed and configured. CISA has added four critical vulnerabilities to its Known Exploited Vulnerabilities catalog, including severe flaws in WordPress (WP2Shell), Langflow, and DD-WRT Windmill平台曝出高危未认证路径遍历漏洞(CVE-2026-29059),攻击者可读取服务器任意文件并可能获取超级管理员权限。 CISA将Windmill、Langflow及WordPress相关漏洞列入已知被利用漏洞目录,显示针对开源基础设施的攻击正在加剧。 WordPress核心漏洞wp2shell引发大规模自动化攻击,攻击者利用REST API混淆和SQL注入实现远程代码执行。 Langflow漏洞(CVE-2026-0770)遭活跃利用,攻击载荷包括下载恶意软件、窃取AWS凭证及执行系统命令。

65
Hot 热度
60
Quality 质量
55
Impact 影响力

Analysis 深度分析

TL;DR

  • Active exploitation of CVE-2026-29059, a path traversal vulnerability in the open-source developer platform Windmill, allows unauthorized reading of arbitrary server files.
  • The vulnerability impacts the "get_log_file" endpoint and can lead to full system compromise if the SUPERADMIN_SECRET environment variable is exposed and configured.
  • CISA has added four critical vulnerabilities to its Known Exploited Vulnerabilities catalog, including severe flaws in WordPress (WP2Shell), Langflow, and DD-WRT.
  • Threat actors are actively deploying complex payloads against Langflow, including malware downloads, credential harvesting, and second-stage payload installation.

Why It Matters

This update highlights the escalating risk to open-source infrastructure, particularly tools widely used in AI and development workflows like Windmill and Langflow. The inclusion of multiple high-severity flaws in CISA’s KEV catalog signals a coordinated push by attackers to exploit unpatched enterprise and government systems, necessitating immediate remediation to prevent unauthorized access and data breaches.

Technical Details

  • Windmill Vulnerability (CVE-2026-29059): A CVSS 7.5 unauthenticated path traversal flaw in the /api/w/{workspace}/jobs_u/get_log_file/{filename} endpoint. Lack of input sanitization allows ../ sequences to read arbitrary files, potentially exposing the SUPERADMIN_SECRET via /proc/1/environ for privilege escalation.
  • WordPress WP2Shell: A critical chain involving REST API batch request route confusion and unauthenticated SQL injection, leading to arbitrary code execution without requiring plugins or themes. Over two dozen unique PoCs have been verified.
  • Langflow RCE (CVE-2026-0770): An unauthenticated remote code execution flaw actively exploited since late June 2026. Attacks involve command execution checks (id, whoami), extraction of AWS credentials and environment variables, and deployment of malware via wget or curl.
  • DD-WRT Buffer Overflow: CVE-2021-27137, a stack-based buffer overflow, was also added to the KEV catalog, indicating continued targeting of legacy IoT firmware.

Industry Insight

  • Immediate Patching Required: Organizations using Windmill must upgrade to version 1.603.3 or later and ensure SUPERADMIN_SECRET is not exposed in accessible environment variables. WordPress administrators should patch immediately due to the high volume of active exploits.
  • Supply Chain Vigilance: The targeting of AI-specific tools like Langflow suggests attackers are prioritizing environments where they can execute arbitrary code to harvest cloud credentials (e.g., AWS) and establish persistent access.
  • Regulatory Compliance: Federal Civilian Executive Branch agencies have a strict deadline of July 24, 2026, to remediate these flaws. Private sector entities should align their patching cycles with CISA’s KEV updates to mitigate known active threats.

TL;DR

  • Windmill平台曝出高危未认证路径遍历漏洞(CVE-2026-29059),攻击者可读取服务器任意文件并可能获取超级管理员权限。
  • CISA将Windmill、Langflow及WordPress相关漏洞列入已知被利用漏洞目录,显示针对开源基础设施的攻击正在加剧。
  • WordPress核心漏洞wp2shell引发大规模自动化攻击,攻击者利用REST API混淆和SQL注入实现远程代码执行。
  • Langflow漏洞(CVE-2026-0770)遭活跃利用,攻击载荷包括下载恶意软件、窃取AWS凭证及执行系统命令。

为什么值得看

本文揭示了当前AI开发者工具链和主流开源平台面临的严峻安全形势,特别是针对无认证访问的远程代码执行漏洞正被广泛利用。对于依赖Windmill、Langflow等AI基础设施的团队而言,及时修补漏洞是防止数据泄露和服务中断的关键;同时,WordPress的大规模攻击也警示了通用Web生态系统的脆弱性,需加强供应链安全意识。

技术解析

  • Windmill漏洞机制:CVE-2026-29059位于/api/w/{workspace}/jobs_u/get_log_file/{filename}端点,因未对filename参数进行消毒,导致目录遍历。若配置了SUPERADMIN_SECRET环境变量,攻击者可通过读取/proc/1/environ获取该密钥,进而伪装成超级管理员通过Job Preview API执行任意代码。
  • WordPress wp2shell攻击链:结合REST API批量请求路由混淆与未认证SQL注入,攻击者无需插件或主题即可直接访问核心接口,最终实现管理员权限提升和代码执行。VulnCheck已验证超过24个独特的概念验证(PoC)漏洞利用程序。
  • Langflow远程代码执行:CVE-2026-0770允许未认证远程代码执行。攻击活动包括探测系统身份、读取敏感文件(如/etc/passwd)、收集环境变量、下载恶意负载(使用wget/curl)以及安装第二阶段Payload。
  • 修复与影响范围:Windmill已在v1.603.3版本中通过添加文件名消毒检查修复此问题。VulnCheck识别出全球24个国家约170个暴露的Windmill易受攻击系统。

行业启示

  • 强化AI工具链的安全基线:随着AI开发平台(如Windmill、Langflow)成为关键基础设施,其默认配置的安全性至关重要。开发者应审查环境变量管理,避免硬编码敏感密钥,并定期更新依赖库以应对新披露的漏洞。
  • 响应已知被利用漏洞的紧迫性:CISA将多个漏洞纳入KEV目录,表明这些威胁已进入大规模实战阶段。组织应立即优先修补这些高危漏洞,特别是那些涉及未认证远程代码执行的缺陷,以防止被自动化攻击工具扫描和利用。
  • 监控异常流量与攻击模式:攻击者正从简单的漏洞扫描转向复杂的持久化操作(如下载恶意软件、窃取云凭证)。安全团队应部署更深入的日志监控,重点关注对系统文件、环境变量和云元数据的异常访问尝试。

Disclaimer: The above content is generated by AI and is for reference only. 免责声明:以上内容由 AI 生成,仅供参考。

Open Source 开源 Security 安全