CVE-2025-69256 PoC — Serverless Framework 命令注入漏洞

Source

https://github.com/SimoesCTT/CTT-Serverless-RCE-v1.0---Convergent-Time-Theory-Enhanced-MCP-Exploit

Associated Vulnerability

Title:Serverless Framework 命令注入漏洞 (CVE-2025-69256)
Description:Serverless Framework是Serverless开源的一个云服务托管工具。 Serverless Framework 4.29.0版本至4.29.3之前版本存在命令注入漏洞，该漏洞源于对child_process.exec的输入参数清理不当，可能导致远程代码执行。

Description

Serverless Framework MCP Server (CVE-2025-69256) Base Score: 9.4/10 → CTT Enhanced Score: 9.9/10  A critical command injection vulnerability in Serverless Framework's MCP (Model Context Protocol) server enhanced with CTT temporal resonance for unprecedented exploitation reliability and evasion.

File Snapshot


 None

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!