wonderwhy-er DesktopCommanderMCP vulnerabilities
5 published CVEs name wonderwhy-er DesktopCommanderMCP among the affected products.
- 5Published CVEs5 of them scored
- 2Last 12 monthspublished in the last year
- 0Critical0 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-10691
wonderwhy-er DesktopCommanderMCP start_search search-manager.ts redos
wonderwhy-er · DesktopCommanderMCP
Medium5.3 - CVE-2026-10690
wonderwhy-er DesktopCommanderMCP read_file filesystem.ts readFileFromUrl server-side request forgery
wonderwhy-er · DesktopCommanderMCP
Medium5.3 - CVE-2025-11491
wonderwhy-er DesktopCommanderMCP command-manager.ts CommandManager os command injection
wonderwhy-er · DesktopCommanderMCP
Medium5.3 - CVE-2025-11490
wonderwhy-er DesktopCommanderMCP Absolute Path command-manager.ts extractBaseCommand os command injection
wonderwhy-er · DesktopCommanderMCP
Medium5.3 - CVE-2025-11489
wonderwhy-er DesktopCommanderMCP filesystem.ts isPathAllowed symlink
wonderwhy-er · DesktopCommanderMCP
Low2.0