Read the docs
TI-2026-09189 Aliases CVE-2026-10690GHSA-5xx3-j724-wmx5

wonderwhy-er DesktopCommanderMCP read_file filesystem.ts readFileFromUrl server-side request forgery

Priority MEDIUM 57CWE-918Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
—
Confidentiality · integrity · availability
Low · Low · Low
Fix status
No fix listed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA and GitHub.

Summary

A vulnerability was identified in wonderwhy-er DesktopCommanderMCP 0.2.37. This affects the function readFileFromUrl of the file src/tools/filesystem.ts of the component read_file. Such manipulation of the argument url leads to server-side request forgery. The attack may be performed from remote. The exploit is publicly available and might be used. The name of the patch is 53699bebba9950047bca16ac4dc8f0568f596aaa. It is best practice to apply a patch to resolve this issue.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00221 12th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by the CNA
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
wonderwhy-erDesktopCommanderMCP0.2.37—No fix listedCNA
—@wonderwhy-er/desktop-commander (npm)up to 0.2.37—No fix listedGHSA-5xx3-j724-wmx5
  • DesktopCommanderMCP Vendorwonderwhy-er Affected 0.2.37 Fixed in — No fix listed CNA
  • @wonderwhy-er/desktop-commander (npm) Vendor— Affected up to 0.2.37 Fixed in — No fix listed GHSA-5xx3-j724-wmx5

CPE names CNA · 1

CPEVersionsRoleVendor
cpe:2.3:a:wonderwhy-er:desktopcommandermcp:*:*:*:*:*:*:*:*——wonderwhy-er
  • cpe:2.3:a:wonderwhy-er:desktopcommandermcp:*:*:*:*:*:*:*:* Versions — — ·wonderwhy-er

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-10690
  2. 2026-10-03 Alias added: GHSA-5xx3-j724-wmx5

References

Exploit 1

Patch 1

Advisory 1

Other 2

  • TI-2026-09190 wonderwhy-er DesktopCommanderMCP start_search search-manager.ts redos CVSS 4.0MEDIUM 5.3
  • TI-2025-10527 wonderwhy-er DesktopCommanderMCP command-manager.ts CommandManager os command injection CVSS 4.0MEDIUM 5.3
  • TI-2025-10526 wonderwhy-er DesktopCommanderMCP Absolute Path command-manager.ts extractBaseCommand os command injection CVSS 4.0MEDIUM 5.3
  • TI-2025-10525 wonderwhy-er DesktopCommanderMCP filesystem.ts isPathAllowed symlink CVSS 4.0LOW 2.0

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences