CVE-2025-11844

This repository is a small educational proof-of-concept for XPath injection, framed around CVE-2025-11844 in Hugging Face smolagents. It is not a full exploit framework; the main logic is in poc_exploit.py. The script accepts a local HTML file path and an optional keyword, launches headless Chrome through Selenium, opens the file via a file:// URL, and executes a malicious XPath expression built from unsanitized input. The injected payload closes the original string context and appends an additional contains(text(), ...) clause, demonstrating how attacker-controlled input can alter XPath semantics and enumerate unintended DOM nodes. Repository structure: README.md describes the claimed vulnerability, affected component (search_item_ctrl_f in vision_web_browser.py), and the insecure XPath pattern. poc_exploit.py is the executable PoC. mock_page.html is a minimal demo target containing a hidden secret value (SECRET_API_KEY_2026_XYZ) to show information disclosure. Monoalphabetic Cipher.html is a larger standalone HTML page that appears unrelated to the vulnerability itself but can serve as another local DOM target for testing XPath matching behavior. Main exploit capability: local browser-based DOM extraction through XPath injection. The PoC does not deliver code execution, persistence, or a shell; it demonstrates information disclosure by retrieving text content from matched elements and printing tag, id, and extracted text to the terminal. It filters out large container tags to keep output readable. Because it operates on local HTML files with Selenium, the practical attack vector here is local/file/browser simulation rather than direct remote exploitation. Overall, this is a valid PoC exploit demonstrating XPath injection impact, primarily unauthorized DOM traversal and data extraction.