Mesop 受 /exec-py 测试套件路由下的未认证远程代码执行影响

The impact of CVE-2026-33057 is severe. An attacker can exploit this vulnerability to gain complete control over the server running the Mesop application. This includes the ability to execute arbitrary commands, access sensitive data, install malware, and potentially pivot to other systems on the network. The vulnerability's lack of authentication makes it particularly dangerous, as any attacker who can route HTTP requests to the /exec-py endpoint can exploit it. The use of base64 encoded strings further obfuscates the malicious code, potentially evading basic detection mechanisms. This vulnerability shares similarities with other code injection flaws where untrusted input is directly executed, highlighting the importance of input validation and sanitization.

Organizations using Mesop in production environments, particularly those with publicly accessible instances or those lacking robust network security controls, are at significant risk. Development environments and testing instances are also vulnerable. Shared hosting environments where Mesop is deployed alongside other applications are particularly susceptible due to the potential for cross-site scripting or other attacks to exploit this vulnerability.

• python: Check for the presence of the /exec-py endpoint using curl:

curl -v http://<mesop_server>/exec-py

• python: Examine the ai/sandbox/wsgi_app.py file for the vulnerable route. Look for code that directly executes base64 encoded strings. • generic web: Monitor access logs for requests to /exec-py with unusual or suspicious base64 encoded payloads. • generic web: Implement rate limiting on the /exec-py endpoint to mitigate brute-force attempts.

1. 2026-03-20Disclosure

   disclosure

1. 已保留2026-03-17
2. 发布日期2026-03-20
3. 修改日期2026-03-25
4. EPSS 更新日期2026-03-27

The primary mitigation for CVE-2026-33057 is to immediately upgrade Mesop to version 1.2.3 or later. If upgrading is not immediately feasible, consider implementing a temporary workaround by disabling the /exec-py endpoint. This can be achieved by modifying the ai/sandbox/wsgi_app.py file to remove or comment out the vulnerable route. Additionally, implement strict network segmentation to limit access to the Mesop application server. Monitor access logs for suspicious activity, particularly requests targeting the /exec-py endpoint. Consider using a Web Application Firewall (WAF) to block requests containing base64 encoded strings or other potentially malicious payloads. After upgrading, confirm the vulnerability is resolved by attempting to access the /exec-py endpoint and verifying that it returns an error or is inaccessible.