CVE-2026-46555 HIGH CVSS 7.1 whatsapp_mcp Verified Advisory

Unauthenticated API and path traversal in WhatsApp MCP Server (CVE-2026-46555)

Docker Path Traversal Whatsapp Mcp Verygoodplugins

The whatsapp-bridge HTTP API in WhatsApp MCP Server listens on 127.0.0.1:8080 without authentication or Host header validation, and the /api/send endpoint accepts an absolute media_path parameter without restricting it to a safe directory. These combined weaknesses allow any local process running as the same user - including sibling MCP servers or IDE extensions - to send WhatsApp messages without authorization, read and exfiltrate arbitrary files accessible to the user, and enable remote attackers to trigger the same operations via DNS rebinding. Affected versions: - <= 0.2.0 We recommend updating to: 0.2.1. CVSS 7.7 · our assessment: this_week Reference: https://github.com/verygoodplugins/whatsapp-mcp/security/advisories/GHSA-7jj9-4qqq-4xc4 Details: https://vuln.today/cve/CVE-2026-46555

Verified by vuln.today against published advisories.

Affected versions

– <= 0.2.0

Fixed in: 0.2.1

Full CVE analysis Reference Published Jul 20, 2026

← All verified advisories