Takahiro Yokoyama
Source-scoped identity with 18 associated PoCs and 20 linked vulnerabilities.
Exploit catalog results
Showing 18 PoCs on this page
MetasploitDalfox Found-Action Deserialization RCE
Metasploit exploitby Emmanuel DavidAdded to Metasploit 2026-05-24ExploitCVE-2026-450871 file
Analysis
Technical assessment
A Metasploit exploit module that achieves remote code execution on Dalfox server <= 2.12.0 by injecting a payload into the 'found-action' option of a POST /scan request, which the server deserializes and executes when a scan finding is triggered.
Backdoor review
No backdoor observed in reviewed code
The Metasploit module exploits CVE-2026-45087 by sending a crafted JSON payload to the vulnerable dalfox server. The module's behavior is consistent with a standard Metasploit exploit: it sends the user-supplied payload to the target via the 'found-action' parameter. No concealed, deceptive, or operator-directed harmful behavior beyond the declared exploit was observed.
Classification basis and observed behavior
Classification basis
The module is a complete Metasploit exploit that actively delivers a payload to achieve remote code execution. It includes check, primer, and exploit methods that send crafted HTTP requests to trigger the vulnerability and execute an attacker-supplied command.
modules/exploits/linux/http/dalfox_server_rce_cve_2026_45087.rb:6modules/exploits/linux/http/dalfox_server_rce_cve_2026_45087.rb:65-73modules/exploits/linux/http/dalfox_server_rce_cve_2026_45087.rb:79-96modules/exploits/linux/http/dalfox_server_rce_cve_2026_45087.rb:98-102Requirements
- Target must be running dalfox version <= 2.12.0 in REST API server mode (dalfox server) without an API key configured.
modules/exploits/linux/http/dalfox_server_rce_cve_2026_45087.rb:19-20 - Attacker must be able to reach the dalfox server port (default 6664).
modules/exploits/linux/http/dalfox_server_rce_cve_2026_45087.rb:20
Observed behavior
- Sends a GET request to /swagger/index.html to detect the dalfox server.
modules/exploits/linux/http/dalfox_server_rce_cve_2026_45087.rb:66-69 - Starts an HTTP server to provide a URL that triggers a scan finding.
modules/exploits/linux/http/dalfox_server_rce_cve_2026_45087.rb:10 - Sends a POST request to /scan with a JSON body containing the encoded payload in the 'found-action' option and 'found-action-shell' set to 'bash'.
modules/exploits/linux/http/dalfox_server_rce_cve_2026_45087.rb:80-94 - The dalfox server deserializes the attacker-supplied options and executes the 'found-action' command when a scan finding occurs.
modules/exploits/linux/http/dalfox_server_rce_cve_2026_45087.rb:21-23
Behaviors behind the backdoor verdict
Observables
- Exploit Mechanism
- Payload withheldThis is the core exploit mechanism for CVE-2026-45087, as described in the module metadata and CVE description.
modules/exploits/linux/http/dalfox_server_rce_cve_2026_45087.rb:84-93 - Http Server
- Payload withheldThe module includes Msf::Exploit::Remote::HttpServer and uses get_uri to provide a URL for the dalfox scan, which is necessary to trigger the vulnerability.
modules/exploits/linux/http/dalfox_server_rce_cve_2026_45087.rb:10modules/exploits/linux/http/dalfox_server_rce_cve_2026_45087.rb:85
What the analysis did not establish
- Analysis is based solely on the provided Metasploit module source code and metadata; framework mixins, libraries, and external payloads are not expanded.
- The module code was not executed; classification is based on static analysis of its stated purpose and logic.
- Review is limited to the provided Metasploit module source code. The behavior of included Metasploit framework mixins (e.g., HttpClient, HttpServer) and the final encoded payload are not expanded or analyzed.
- Binary files were not present in the evidence.
This review is limited to the supplied PoC code and context. It does not assert that the code works or is safe to execute.
MetasploitFlowise CSV Agent Prompt Injection RCE
Metasploit exploitby zdi-disclosuresAdded to Metasploit 2026-05-05ExploitCVE-2026-412641 file
Analysis
Technical assessment
Metasploit module that exploits CVE-2026-41264, a prompt injection vulnerability in Flowise CSV Agent, to achieve remote code execution. The module creates a malicious chatflow, injects a base64-encoded payload into a CSV file, and triggers execution via a prediction request.
Backdoor review
No backdoor observed in reviewed code
The reviewed Metasploit module source code implements a documented exploit for CVE-2026-41264. It creates a chatflow, injects a payload via a CSV Agent prompt, and triggers execution. No concealed backdoor, unrelated payload, credential theft, persistence, or deceptive behavior was observed. The module's actions are consistent with its stated exploit purpose.
Classification basis and observed behavior
Classification basis
The module is a Metasploit exploit that actively delivers a payload to achieve remote code execution. It constructs a malicious chatflow, injects attacker-controlled commands, and triggers their execution on the target server.
modules/exploits/multi/http/flowise_auth_rce_cve_2026_41264.rb:89-121Requirements
- Requires a valid Flowise API key with chatflows:create permission.
modules/exploits/multi/http/flowise_auth_rce_cve_2026_41264.rb:74 - Requires an attacker-controlled Ollama API endpoint and a valid model name.
modules/exploits/multi/http/flowise_auth_rce_cve_2026_41264.rb:75-76 - Target Flowise version must be between 1.3.0 and 3.0.13 inclusive.
modules/exploits/multi/http/flowise_auth_rce_cve_2026_41264.rb:84
Observed behavior
- Sends a POST request to /api/v1/chatflows to create a chatflow containing a malicious CSV agent definition with an embedded payload.
modules/exploits/multi/http/flowise_auth_rce_cve_2026_41264.rb:97-105 - Sends a POST request to /api/v1/prediction/{id} with a question that triggers execution of the injected Python code via exec(df["pythoncode"].iloc[0]).
modules/exploits/multi/http/flowise_auth_rce_cve_2026_41264.rb:110-120 - Deletes the created chatflow during cleanup via DELETE /api/v1/chatflows/{id}.
modules/exploits/multi/http/flowise_auth_rce_cve_2026_41264.rb:123-135
Behaviors behind the backdoor verdict
Observables
- Exploit Mechanism
- Payload withheldThe module constructs a payload that uses os.system to execute the Metasploit payload, consistent with the described vulnerability.
modules/exploits/multi/http/flowise_auth_rce_cve_2026_41264.rb:95modules/exploits/multi/http/flowise_auth_rce_cve_2026_41264.rb:118 - Required Credentials
- Payload withheldThe module requires an API key to authenticate to the Flowise instance, as documented in the module options.
modules/exploits/multi/http/flowise_auth_rce_cve_2026_41264.rb:74 - Cleanup Behavior
- Payload withheldThe cleanup method removes the chatflow created during exploitation, which is standard operational security for a Metasploit module.
modules/exploits/multi/http/flowise_auth_rce_cve_2026_41264.rb:123-135
What the analysis did not establish
- The analysis is based solely on the module source code and metadata; framework mixins, libraries, and external payloads are not expanded.
- The module's check method only performs version detection and does not verify the vulnerability is actually exploitable on the target.
- The Windows target is marked as 'not tested' in the source code.
- The analysis is limited to the module source file; framework mixins (e.g., Msf::Exploit::Remote::HTTP::Flowise) and external payloads are not expanded or reviewed.
- The exploit data file 'cve_2026_41264.json' referenced on line 91 is not included in the evidence, so its contents could not be inspected.
This review is limited to the supplied PoC code and context. It does not assert that the code works or is safe to execute.
MetasploitLangflow RCE
Metasploit exploitby weblover12Added to Metasploit 2026-04-09ExploitCVE-2026-279661 file
Analysis
Technical assessment
A Metasploit module that exploits CVE-2026-27966 in Langflow by uploading a malicious flow definition containing a CSV Agent node. The flow triggers LangChain's Python REPL to execute attacker-supplied Python or OS commands, achieving remote code execution.
Backdoor review
No backdoor observed in reviewed code
The reviewed Metasploit module source code implements a standard exploit for CVE-2026-27966. It uses the documented Langflow API to create a project, upload a CSV file, import a crafted flow, and trigger execution. The payload is delivered via the expected exploit mechanism (Python REPL injection) and no concealed backdoor, credential theft, persistence, or unrelated payload delivery is present.
Classification basis and observed behavior
Classification basis
The module is a complete Metasploit exploit that actively exercises the vulnerability by constructing and sending HTTP requests to create a project, upload a CSV file, import a malicious flow, and trigger execution of attacker-controlled commands on the target server. It includes payload encoding and delivery, not just detection.
modules/exploits/multi/http/langflow_rce_cve_2026_27966.rb:6modules/exploits/multi/http/langflow_rce_cve_2026_27966.rb:103-185Requirements
- Valid Langflow API key
modules/exploits/multi/http/langflow_rce_cve_2026_27966.rb:68 - Attacker-controlled Ollama API endpoint
modules/exploits/multi/http/langflow_rce_cve_2026_27966.rb:69 - Valid Ollama model name
modules/exploits/multi/http/langflow_rce_cve_2026_27966.rb:70 - Target Langflow version < 1.8.0
modules/exploits/multi/http/langflow_rce_cve_2026_27966.rb:88
Observed behavior
- Checks target version via /api/v1/version and validates API key via /api/v1/users/whoami
modules/exploits/multi/http/langflow_rce_cve_2026_27966.rb:76-101 - Creates a new project via POST /api/v1/projects/
modules/exploits/multi/http/langflow_rce_cve_2026_27966.rb:104-120 - Uploads a CSV file via POST /api/v2/files
modules/exploits/multi/http/langflow_rce_cve_2026_27966.rb:122-137 - Loads and customizes a JSON exploit template (cve_2026_27966.json) with project ID, model, Ollama URI, file path, and payload
modules/exploits/multi/http/langflow_rce_cve_2026_27966.rb:139-151 - Imports the malicious flow via POST /api/v1/flows/upload/
modules/exploits/multi/http/langflow_rce_cve_2026_27966.rb:157-170 - Triggers flow execution via POST /api/v1/build/{flow_id}/flow, causing payload execution on the server
modules/exploits/multi/http/langflow_rce_cve_2026_27966.rb:173-185 - Cleans up by deleting the uploaded file and project
modules/exploits/multi/http/langflow_rce_cve_2026_27966.rb:187-207
Behaviors behind the backdoor verdict
Observables
- Exploit Mechanism
- Payload withheldThis is the intended exploit path for CVE-2026-27966; no hidden or unrelated behavior is observed.
modules/exploits/multi/http/langflow_rce_cve_2026_27966.rb:139-185 - Payload Delivery
- Payload withheldThis is standard Metasploit payload handling; no additional commands or backdoors are injected.
modules/exploits/multi/http/langflow_rce_cve_2026_27966.rb:144-150 - Cleanup Behavior
- Payload withheldThis is benign housekeeping; no persistence or malicious artifact retention.
modules/exploits/multi/http/langflow_rce_cve_2026_27966.rb:187-207
What the analysis did not establish
- The exploit data template file (cve_2026_27966.json) referenced at line 139 is not included in the evidence; its exact content is unknown.
- Metasploit framework mixins (HttpClient, AutoCheck, Post::File) and payload modules are not expanded; their behavior is assumed from standard Metasploit conventions.
- The evidence does not include runtime execution output or confirmation that the exploit succeeds.
- The external exploit data file 'cve_2026_27966.json' referenced on line 139 is not included in the evidence; its contents are not reviewed.
This review is limited to the supplied PoC code and context. It does not assert that the code works or is safe to execute.
MetasploitSelenium Grid/Selenoid Unauthenticated RCE
Metasploit exploitby Jon Stratton, plus 2 additional contributorsAdded to Metasploit 2026-02-21ExploitUnlinked1 file
Analysis
Technical assessment
Metasploit exploit module for unauthenticated remote code execution on Selenium Grid and Selenoid via WebDriver API. It auto-detects the backend and available browsers, then exploits Chrome via binary override or Firefox via malicious profile with MIME handler to execute a payload.
Backdoor review
No backdoor observed in reviewed code
The reviewed Metasploit module source code implements a documented remote code execution exploit against unauthenticated Selenium Grid/Selenoid instances. It uses standard Metasploit framework APIs to deliver a user-selected payload via Chrome binary override or Firefox profile handler techniques. No concealed, deceptive, or operator-directed harmful behavior beyond the stated exploit functionality was observed.
Classification basis and observed behavior
Classification basis
The module is a complete Metasploit exploit that includes check and exploit methods, constructs malicious HTTP requests to create browser sessions with payloads, and executes arbitrary commands on the target. It is classified as exploit because it actively exercises the vulnerability to achieve remote code execution.
modules/exploits/linux/http/selenium_greed_rce.rb:112-119modules/exploits/linux/http/selenium_greed_rce.rb:227-253modules/exploits/linux/http/selenium_greed_rce.rb:260-292Requirements
- Target must be running Selenium Grid or Selenoid without authentication
modules/exploits/linux/http/selenium_greed_rce.rb:25-26 - Target must have Chrome (unpatched Grid <4.11.0 or Selenoid) or Firefox available
modules/exploits/linux/http/selenium_greed_rce.rb:29-38
Observed behavior
- Detects backend type (Selenium Grid or Selenoid) by querying status endpoints
modules/exploits/linux/http/selenium_greed_rce.rb:148-161 - Enumerates available browsers from backend metadata
modules/exploits/linux/http/selenium_greed_rce.rb:163-182 - For Chrome, sends a session creation request with goog:chromeOptions binary set to /usr/bin/python3 and args containing a Python payload
modules/exploits/linux/http/selenium_greed_rce.rb:227-235 - For Firefox, builds a malicious profile ZIP with handlers.json mapping application/sh to /bin/sh, creates a session, and navigates to a data: URI to trigger shell execution
modules/exploits/linux/http/selenium_greed_rce.rb:260-303 - Cleans up created sessions after exploitation
modules/exploits/linux/http/selenium_greed_rce.rb:220-225
Behaviors behind the backdoor verdict
Observables
- Exploit Technique
- Payload withheldThe module sets the Chrome binary to /usr/bin/python3 with attacker-controlled arguments to execute a payload.
modules/exploits/linux/http/selenium_greed_rce.rb:232 - Exploit Technique
- Payload withheldThe module creates a malicious Firefox profile that maps application/sh to /bin/sh, then navigates to a data: URI to trigger shell execution.
modules/exploits/linux/http/selenium_greed_rce.rb:294-303 - Payload Delivery
- Payload withheldThe module uses payload.encoded and Msf::Payload::Python mixin to deliver attacker-chosen payloads, consistent with normal Metasploit exploit behavior.
modules/exploits/linux/http/selenium_greed_rce.rb:256modules/exploits/linux/http/selenium_greed_rce.rb:275
What the analysis did not establish
- Analysis is based on module source code only; framework mixins, libraries, and external payloads are not expanded.
- No runtime behavior or network traffic was observed; classification relies solely on static code analysis.
- Review is limited to the module source code; Metasploit framework mixins, libraries, and external payloads referenced by the module are not expanded or analyzed.
- Binary files were not present in the evidence.
This review is limited to the supplied PoC code and context. It does not assert that the code works or is safe to execute.