PT-2026-24859 · 0Xkoda · Wiremcp

Yinci Chen · Publicado 2026-03-11 · Atualizado 2026-03-12 · CVE-2026-3959

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions 0xKoda WireMCP versions up to 7f45f8b2b4adeb76be8c6227eefb38533fdd6b1e

Description A flaw exists in 0xKoda WireMCP that allows for operating system command injection. The issue resides in the server.tool function within the index.js file of the Tshark CLI Command Handler component. Manipulation of this function can lead to the execution of arbitrary commands on the system. The attack requires local access. The exploit for this issue has been publicly released. The product employs a rolling release system, meaning version information for affected or updated releases is not publicly available. The project maintainers were notified of the issue but have not yet responded.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

OS Command Injection

Command Injection

Enumeração de Fraquezas

CWE-78

CWE-77

Identificadores relacionados

CVE-2026-3959

Produtos afetados

Wiremcp

Referências · 9

• 🔥❌ https://github.com/user-attachments/files/25571315/WireMCP_security_advisory.pdf · Exploit, Deleted
• https://github.com/0xKoda/WireMCP/issues/12 · Nota
• https://t.me/CVEtracker/47196 · Publicação no Telegram
• https://vuldb.com/?id.350389 · Nota
• https://github.com/0xKoda/WireMCP · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-3959 · Nota de Segurança
• https://twitter.com/CVEnew/status/2031867621218431354 · Publicação no Twitter
• https://vuldb.com/?submit.768129 · Nota
• https://vuldb.com/?ctiid.350389 · Nota