CVE-2024-10252 Dify 沙盒代码注入沙盒逃逸漏洞分析

import ctypes
import os
import sys
import traceback
# setup sys.excepthook 定义系统异常回调
def excepthook(type, value, tb):
    sys.stderr.write("".join(traceback.format_exception(type, value, tb)))
    sys.stderr.flush()
    sys.exit(-1)

sys.excepthook = excepthook

# 加载GO实现的Seccomp沙盒
lib = ctypes.CDLL("./python.so")
lib.DifySeccomp.argtypes = [ctypes.c_uint32, ctypes.c_uint32, ctypes.c_bool]
lib.DifySeccomp.restype = None

# get running path 获取执行路径
running_path = sys.argv[1]
if not running_path:
    exit(-1)

# get decrypt key 获取解密key
key = sys.argv[2]
if not key:
    exit(-1)

from base64 import b64decode
key = b64decode(key)

# 改变工作目录到 running_path 
os.chdir(running_path)

{{preload}}

# 初始化沙盒
lib.DifySeccomp({{uid}}, {{gid}}, {{enable_network}})

code = b64decode("{{code}}")

def decrypt(code, key):
    key_len = len(key)
    code_len = len(code)
    code = bytearray(code)
    for i in range(code_len):
        code[i] = code[i] ^ key[i % key_len]
    return bytes(code)

code = decrypt(code, key)
exec(code)