Beveiligingsadvies

CVE-2026-43901

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-05-11 21:51:41

Laatst bijgewerkt 2026-05-13 14:38:55

Toegewezen door GitHub_M

CVSS-score 6.8

Status PUBLISHED

Beschrijving

Wireshark MCP is an MCP Server that turns tshark into a structured analysis interface, then layers in optional Wireshark suite utilities. In 1.1.5 and earlier, wireshark-mcp exposes a wireshark_export_objects MCP tool that accepts an attacker-controlled dest_dir parameter and passes it to tshark's --export-objects flag with no mandatory path restriction. The path sandbox (_allowed_dirs) is None by default and only activates when the environment variable WIRESHARK_MCP_ALLOWED_DIRS is explicitly set. In a default installation, any directory on the filesystem can be used as the export destination.

← Alle CVE's bekijken Bekijk op cve.org ↗