Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/05/05 8:15 p.m.11 views

wireshark-mcp vulnerable to arbitrary file write via export_objects when WIRESHARK_MCP_ALLOWED_DIRS is not configured

Description Impact wireshark-mcp exposes a wiresharkexportobjects MCP tool that accepts an attacker-controlled destdir parameter and passes it to tshark's --export-objects flag with no mandatory path restriction. The path sandbox alloweddirs is None by default and only activates when the...

6.8CVSS5.9AI score0.00281EPSS
SaveExploits1References3Affected Software1
Rows per page
Query Builder