desktopcommandermcp vulnerabilities

CVEs whose affected-version data names the desktopcommandermcp package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

3 CVEsRSS

CVE-2025-11491Medium· 6.3

1y ago

A vulnerability was found in wonderwhy-er DesktopCommanderMCP up to 0.2.13

A vulnerability was found in wonderwhy-er DesktopCommanderMCP up to 0.2.13. The impacted element is the function CommandManager of the file src/command-manager.ts. Performing manipulation results in os command injection. It is possible t…

▾ Sunlitwonderwhy-er · desktopcommandermcpEPSS 4.3%via NVD

CVE-2025-11490Medium· 6.3

1y ago

A vulnerability has been found in wonderwhy-er DesktopCommanderMCP up to 0.2.13

A vulnerability has been found in wonderwhy-er DesktopCommanderMCP up to 0.2.13. The affected element is the function extractBaseCommand of the file src/command-manager.ts of the component Absolute Path Handler. Such manipulation leads t…

▾ Sunlitwonderwhy-er · desktopcommandermcpEPSS 3.5%via NVD

CVE-2025-11489Medium· 4.5

1y ago

A security vulnerability has been detected in wonderwhy-er DesktopCommanderMCP up to 0.2.13

A security vulnerability has been detected in wonderwhy-er DesktopCommanderMCP up to 0.2.13. This vulnerability affects the function isPathAllowed of the file src/tools/filesystem.ts. The manipulation leads to symlink following. The atta…

▾ Sunlitwonderwhy-er · desktopcommandermcpEPSS 0.25%via NVD