chatboxai chatbox Model Context Protocol Server Management System ipc-stdio-transport.ts StdioClientTransport os 命令注入

在 chatboxai chatbox 的 1.20.0 及更早版本中发现了一种命令注入漏洞。该漏洞位于文件 src/main/mcp/ipc-stdio-transport.ts 中的 StdioClientTransport 函数中，是 Model Context Protocol Server Management System 的一个组件。攻击者可以通过操纵 'args/env' 参数来利用此漏洞，从而可能导致执行任意操作系统命令。由于此漏洞可以远程利用，因此尤其令人担忧，因为它可以在无需访问受影响系统的情况下被利用。公开发布利用程序会大大增加攻击的风险。

Organizations deploying chatboxai chatbox in production environments, particularly those with public-facing instances or those integrated with other critical systems, are at significant risk. Shared hosting environments where multiple users share the same server are also vulnerable, as a compromise of one user's chatboxai chatbox instance could potentially impact others.

• nodejs: Monitor process execution for suspicious commands related to the chatboxai chatbox application.

ps aux | grep chatboxai | grep -i 'command injection'

• nodejs: Check for unusual network connections originating from the chatboxai chatbox process.

netstat -tulnp | grep chatboxai

• generic web: Examine access and error logs for requests containing suspicious characters or patterns indicative of command injection attempts (e.g., ;, |, &&). • generic web: Review response headers for unexpected content or error messages that might indicate exploitation.

1. 2026-04-12Disclosure

   disclosure

1. 已保留2026-04-12
2. 发布日期2026-04-12
3. 修改日期2026-04-13
4. EPSS 更新日期2026-04-20

目前，chatboxai 开发人员尚未发布任何官方修复程序（fix）。当前的建议是，在安全更新可用之前，避免使用 chatboxai chatbox 的 1.20.0 之前的版本。作为临时措施，建议实施严格的网络控制，以限制对 chatboxai 实例的访问，并主动监控系统是否存在可疑活动。用户应随时关注 chatboxai 团队发布的任何安全公告，并在更新可用时立即应用更新。项目对初始漏洞报告的回应不足是额外的风险因素。