Exploit for CVE-2021-3129

githubexploit · 2026-08-07

Description

Overview of Laravel Ignition CVE-2021-3129 remote code execution and log poisoning chain.

Entry point

Parametersolution · request body

Path/_ignition/execute-solution

Unauthenticated remote code execution via Ignition execute-solution endpoint (CVE-2021-3129).

Affected Facade Ignition versions

Facade Ignition< 2.5.2

All known vulnerabilities by product

Ignition Laravel

CVSS 9.8 for CVE-2021-3129

9.8

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

Working code

100%confidence this exploit runs

Based on 4 file(s) in the source

CVE Information

Exploit Details

Modified:2026-08-07 14:46

Last Seen:2026-08-07 14:50

Reporter:Giangdurian

Written in:Python

Last commit:2026-08-07

Tags

Laravel IgnitionRemote code executionLog poisoningPhar deserialization

Other exploits for CVE-2021-3129

Exploit for CVE-2021-3129

2026-02-12 Nullsecur1tyGITHUB

Exploit for CVE-2021-3129

2026-01-30 crypt0lithGITHUB

Exploit for CVE-2021-3129

2024-09-29 0x0d3adGITHUB

Exploit for CVE-2021-3129

2024-05-19 cc3305GITHUB

Exploit for CVE-2021-3129

2024-01-15 AxiankeGITHUB

Exploit for CVE-2021-3129

2023-10-22 banyaksepuhGITHUB

Exploit for CVE-2021-3129

2023-10-22 banyaksepuhGITHUB

Exploit for CVE-2021-3129

2023-07-27 withmasdayGITHUB

Exploit Code

README14 lines

## https://sploitus.com/exploit?id=D2C14EE8-B829-58E0-9495-83A757EA0B11
# CVE-2021-3129 — Laravel Ignition Remote Code Execution

**CVSS 9.8 (Critical)** | Unsafe File Operations → Log Poisoning → Phar Deserialization → RCE

## Tổng quan

Laravel Ignition  -c "whoami"
```

## Tham khảo

- [NVD — CVE-2021-3129](https://nvd.nist.gov/vuln/detail/CVE-2021-3129)
- [Ignition Patch (2.5.2)](https://github.com/facade/ignition/commit/e1e05c9)