Low severity3.5NVD Advisory· Published Jun 1, 2026· Updated Jun 1, 2026

CVE-2026-10264

Description

A vulnerability was determined in lharries whatsapp-mcp 0.0.1. Affected by this vulnerability is the function SendMessageRequest of the file whatsapp-bridge/main.go of the component Send API Endpoint. This manipulation of the argument mediaPath causes path traversal. The exploit has been publicly disclosed and may be utilized. Patch name: 6657cdceadd361e8fbe824afe9d00b4504009a5d. It is recommended to apply a patch to fix this issue.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Patches

Vulnerability mechanics

References

github.com/BenGedi/whatsapp-mcp/commit/6657cdceadd361e8fbe824afe9d00b4504009a5dnvd
github.com/BenGedi/whatsapp-mcp/pull/1nvd
github.com/lharries/whatsapp-mcp/issues/241nvd
vuldb.com/cve/CVE-2026-10264nvd
vuldb.com/submit/824924nvd
vuldb.com/vuln/367544nvd
vuldb.com/vuln/367544/ctinvd

News mentions

No linked articles in our index yet.

cvss	0.227
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000