Read the docs
TI-2025-10526 Aliases CVE-2025-11490GHSA-j878-h566-h85x

wonderwhy-er DesktopCommanderMCP Absolute Path command-manager.ts extractBaseCommand os command injection

Priority MEDIUM 57CWE-77Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
Code execution
Confidentiality · integrity · availability
Low · Low · Low
Fix status
No fix listed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-77.

Summary

A vulnerability has been found in wonderwhy-er DesktopCommanderMCP up to 0.2.13. The affected element is the function extractBaseCommand of the file src/command-manager.ts of the component Absolute Path Handler. Such manipulation leads to os command injection. The attack may be performed from remote. The exploit has been disclosed to the public and may be used. The vendor explains: "The usual use case is that AI is asked to do something, picks commands itself, and typically uses simple command names without absolute paths. It's curious why a user would ask the model to bypass restrictions this way. (...) This could potentially be a problem, but we are yet to hear reports of this being an issue in actual workflows. We'll leave this issue open for situations where people may report this as a problem for the long term."

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.03542 89th percentileScored 2026-11-07
Public exploit Yes 2 exploit referencesTagged by NVD and the CNA
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
wonderwhy-erDesktopCommanderMCP0.2.0; 0.2.1; 0.2.2; 0.2.3; 0.2.4; 0.2.5; 0.2.6; 0.2.7; 0.2.8; 0.2.9; 0.2.10; 0.2.11; 0.2.12; 0.2.13—No fix listedCNA
  • DesktopCommanderMCP Vendorwonderwhy-er Affected 0.2.0; 0.2.1; 0.2.2; 0.2.3; 0.2.4; 0.2.5; 0.2.6; 0.2.7; 0.2.8; 0.2.9; 0.2.10; 0.2.11; 0.2.12; 0.2.13 Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:wonderwhy-er:desktopcommandermcp:*:*:*:*:*:*:*:*up to 0.2.13Vulnerablewonderwhy-er
  • cpe:2.3:a:wonderwhy-er:desktopcommandermcp:*:*:*:*:*:*:*:* Versions up to 0.2.13 Vulnerable ·wonderwhy-er

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-11490
  2. 2026-10-03 Alias added: GHSA-j878-h566-h85x

References

Exploit 2

Other 1

  • TI-2025-10527 wonderwhy-er DesktopCommanderMCP command-manager.ts CommandManager os command injection CVSS 4.0MEDIUM 5.3
  • TI-2025-10525 wonderwhy-er DesktopCommanderMCP filesystem.ts isPathAllowed symlink CVSS 4.0LOW 2.0

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences