Description
A vulnerability was determined in lharries whatsapp-mcp 0.0.1. Affected by this vulnerability is the function SendMessageRequest of the file whatsapp-bridge/main.go of the component Send API Endpoint. This manipulation of the argument mediaPath causes path traversal. The exploit has been publicly disclosed and may be utilized. Patch name: 6657cdceadd361e8fbe824afe9d00b4504009a5d. It is recommended to apply a patch to fix this issue.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| lharries | whatsapp-mcp | 0.0.1 | — |
References
- VDB-367544 | lharries whatsapp-mcp Send API Endpoint main.go SendMessageRequest path traversal vdb-entry technical-description
- VDB-367544 | CTI Indicators (IOB, IOC, TTP, IOA) signature permissions-required
- CVE-2026-10264 | CVE Analysis and Report third-party-advisory
- Submit #824924 | lharries whatsapp-mcp v0.0.1 Path Traversal third-party-advisory
- https://github.com/lharries/whatsapp-mcp/issues/241 exploit issue-tracking
- https://github.com/BenGedi/whatsapp-mcp/pull/1 issue-tracking patch
- https://github.com/BenGedi/whatsapp-mcp/commit/6657cdceadd361e8fbe824afe9d00b4504009a5d patch
- https://github.com/lharries/whatsapp-mcp/ product