{"data":{"id":"82b0937b-3fc4-4e30-a439-45d6bd42d13f","title":"CVE-2026-46555: WhatsApp MCP Server is a Model Context Protocol (MCP) server for WhatsApp, enabling Claude to read and send WhatsApp…","summary":"WhatsApp MCP Server, prior to version 0.2.1, exposes its `whatsapp-bridge` HTTP API on `127.0.0.1:8080` without authentication or Host header validation, and the `/api/send` endpoint accepts an absolute `media_path` without confinement to a safe directory. A local process running as the same user, or a remote attacker via DNS rebinding from a visited webpage, can send messages from the paired account, read arbitrary user-readable files such as SSH keys, and exfiltrate them as WhatsApp attachments.","solution":"Fixed in whatsapp-mcp v0.2.1 and corresponding Docker images and release artifacts, which add bearer token authentication, host header allow-list validation, and confinement of `media_path` to a configured directory. This is a breaking change for bridge API clients. Users who cannot upgrade immediately should stop the bridge or block loopback access to port 8080 when unused, avoid running it alongside untrusted MCP servers or local processes, avoid browsing untrusted sites while it runs, and/or run it under a dedicated user account or in a sandbox/container without access to sensitive files.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-46555","publishedAt":"2026-07-20T17:17:09.820Z","cveId":"CVE-2026-46555","cweIds":["CWE-22","CWE-306","CWE-346"],"cvssScore":"7.7","cvssSeverity":"high","severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":["Anthropic"],"affectedVendorsRaw":["WhatsApp MCP Server","Claude"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"WhatsApp MCP Server bridge API unauthenticated local and DNS rebinding access","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","attackVector":"local","attackComplexity":"low","privilegesRequired":"none","userInteraction":"none","exploitMaturity":"unknown","epssScore":0.00207,"epssCheckedAt":"2026-11-04T12:08:33.690Z","kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-11-02T12:08:55.697Z","patchAvailable":null,"disclosureDate":"2026-07-20T17:17:09.820Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":["CAPEC-115","CAPEC-126"],"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality","integrity"],"aiComponentTargeted":"plugin","llmSpecific":true,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[]}}