CVE-2026-43901 Details
Description
Wireshark MCP is an MCP Server that turns tshark into a structured analysis interface, then layers in optional Wireshark suite utilities. In 1.1.5 and earlier, wireshark-mcp exposes a wireshark_export_objects MCP tool that accepts an attacker-controlled dest_dir parameter and passes it to tshark's --export-objects flag with no mandatory path restriction. The path sandbox (_allowed_dirs) is None by default and only activates when the environment variable WIRESHARK_MCP_ALLOWED_DIRS is explicitly set. In a default installation, any directory on the filesystem can be used as the export destination.
A vulnerability in Wireshark MCP versions through 1.1.5 allows for arbitrary file writing. The issue arises in the 'wireshark_export_objects' MCP tool, which accepts an attacker-controlled 'dest_dir' parameter and passes it to tshark's '--export-objects' flag without any mandatory path restrictions. By default, the path sandbox is disabled, leaving any directory on the filesystem accessible for exports. This vulnerability can be exploited by embedding a crafted HTTP response into a pcap file, manipulating an AI model to call 'wireshark_export_objects' with a desired destination directory. As a result, sensitive files such as authorized_keys can be accessed or overwritten.
Users can set the 'WIRESHARK_MCP_ALLOWED_DIRS' environment variable to a restricted directory before starting the server, which activates the existing path sandbox and blocks writes outside the allowed directory.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed May 13, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/bx33661/Wireshark-MCP/security/advisories/GHSA-3r68-x3xc-rxpg | CISA-ADP | ExploitMitigationPatchVendor Advisory |
| https://github.com/bx33661/Wireshark-MCP/security/advisories/GHSA-3r68-x3xc-rxpg | [email protected] | ExploitMitigationPatchVendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| bx33661 wireshark mcp | <= 1.1.5 |
CPE
Remediation
| |
Change History
5 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| May 13, 2026 | CVE Modified | CISA-ADP |
| May 13, 2026 | Initial Analysis | [email protected] |
| May 11, 2026 | New CVE Received | [email protected] |