PT-2026-37305 · Unknown · Wireshark-Mcp

Bx33661 · Published 2026-05-05 · Updated 2026-05-12 · CVE-2026-43901

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Medium

Base vector

AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions wireshark-mcp versions 1.1.5 and earlier

Description wireshark-mcp exposes a wireshark export objects tool that accepts an attacker-controlled dest dir parameter and passes it to the --export-objects flag of tshark without mandatory path restrictions. By default, the path sandbox allowed dirs is set to None, allowing any directory on the filesystem to be used as an export destination. This issue also affects the merge pcap files, editcap trim, editcap split, editcap time shift, editcap deduplicate, and text2pcap import operations. An attacker could potentially use prompt injection within a pcap payload to manipulate an AI model into writing files to sensitive locations, such as /home/user/.ssh/ or /etc/cron.d/.

Recommendations For versions 1.1.5 and earlier, set the WIRESHARK MCP ALLOWED DIRS environment variable to a restricted safe directory before starting the server to activate the sandbox and block writes outside the allowed path.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2026-43901

GHSA-3R68-X3XC-RXPG

Affected Products

Wireshark-Mcp

References · 9

• 🔥 https://github.com/bx33661/Wireshark-MCP/security/advisories/GHSA-3r68-x3xc-rxpg · Exploit
• https://cve.org/CVERecord?id=CVE-2026-43901 · Security Note
• https://ubuntu.com/security/CVE-2026-43901 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-43901 · Security Note
• https://osv.dev/vulnerability/GHSA-3r68-x3xc-rxpg · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-43901 · Vendor Advisory
• https://github.com/bx33661/Wireshark-MCP · Note
• https://twitter.com/VulmonFeeds/status/2054163932189773828 · Twitter Post
• https://t.me/CVEtracker/53432 · Telegram Post