Wireshark Mcp
Approved changes feed: RSS · Atom
cpe:2.3:a:bx33661:wireshark-mcp:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Bx33661 (7f1ff59e-64dc-5500-9c03-8e7da932ffe1) |
|---|---|
| Product | Wireshark Mcp (f0a451cb-2ca5-5360-bb1d-5709d26ce914) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-43901 |
vulnerable | 2026-06-08 08:03:17.994580 |
Wireshark MCP: Arbitrary file write via export_objects when WIRESHARK_MCP_ALLOWED_DIRS is not configured
MEDIUM (6.8)
Wireshark MCP is an MCP Server that turns tshark into a structured analysis interface, then layers in optional Wireshark suite utilities. In 1.1.5 and earlier, wireshark-mcp exposes a wireshark_export_objects MCP tool that accepts an attacker-controlled dest_dir parameter and passes it to tshark's --export-objects flag with no mandatory path restriction. The path sandbox (_allowed_dirs) is None by default and only activates when the environment variable WIRESHARK_MCP_ALLOWED_DIRS is explicitly set. In a default installation, any directory on the filesystem can be used as the export destination.
Published: 2026-05-11T21:51:41.387Z
Updated: 2026-05-13T14:38:55.840Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.