CVE-2026-10264

A vulnerability was determined in lharries whatsapp-mcp 0.0.1. Affected by this vulnerability is the function SendMessageRequest of the file whatsapp-bridge/main.go of the component Send API Endpoint. This manipulation of the argument mediaPath causes path traversal. The exploit has been publicly disclosed and may be utilized. Patch name: 6657cdceadd361e8fbe824afe9d00b4504009a5d. It is recommended to apply a patch to fix this issue.

• CWE-22

• https://github.com/BenGedi/whatsapp-mcp/commit/6657cdceadd361e8fbe824afe9d00b4504009a5d
• https://github.com/BenGedi/whatsapp-mcp/pull/1
• https://github.com/lharries/whatsapp-mcp/
• https://github.com/lharries/whatsapp-mcp/issues/241
• https://vuldb.com/cve/CVE-2026-10264
• https://vuldb.com/submit/824924
• https://vuldb.com/vuln/367544
• https://vuldb.com/vuln/367544/cti

Published

Jun 1, 2026

Last Modified

Jul 22, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-102634SGLang through 0.5.20 in prefill/decode disaggregation mode …7.5
• CVE-2026-102635ImageMagick versions before 7.1.2-32 and 6.9.13-57 contain u…5.3
• CVE-2026-102636A maliciously crafted HTML payload in a design name, when di…7.1
• CVE-2026-102637A maliciously crafted HTML payload in the documentName param…7.1
• CVE-2026-102638A maliciously crafted HTML payload in the description of an …7.1
• CVE-2026-102639MobilityDB version 1.3.0 and earlier contains an out-of-boun…6.5
• CVE-2026-102643AsyncSSH is a Python package which provides an asynchronous …8.8
• CVE-2026-102649Burrito is a Terraform Automation Collaboration Software (TA…9.9
• CVE-2026-10265A vulnerability was identified in itsourcecode Content Manag…6.3
• CVE-2026-102650Nuxt Content is the file-based CMS for Nuxt applications, po…7.5
• CVE-2026-102657esm.sh is a no-build content delivery network (CDN) for web …7.5
• CVE-2026-102663OpenList is a file list program that supports multiple stora…4.3