Approved changes feed: RSS · Atom

cpe:2.3:a:bx33661:wireshark-mcp:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorBx33661 (7f1ff59e-64dc-5500-9c03-8e7da932ffe1)
ProductWireshark Mcp (f0a451cb-2ca5-5360-bb1d-5709d26ce914)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-43901 vulnerable 2026-06-08 08:03:17.994580 Wireshark MCP: Arbitrary file write via export_objects when WIRESHARK_MCP_ALLOWED_DIRS is not configured
MEDIUM (6.8)
Wireshark MCP is an MCP Server that turns tshark into a structured analysis interface, then layers in optional Wireshark suite utilities. In 1.1.5 and earlier, wireshark-mcp exposes a wireshark_export_objects MCP tool that accepts an attacker-controlled dest_dir parameter and passes it to tshark's --export-objects flag with no mandatory path restriction. The path sandbox (_allowed_dirs) is None by default and only activates when the environment variable WIRESHARK_MCP_ALLOWED_DIRS is explicitly set. In a default installation, any directory on the filesystem can be used as the export destination.
Published: 2026-05-11T21:51:41.387Z
Updated: 2026-05-13T14:38:55.840Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.