Vulnerabilities

TI-2025-10527 CVE-2025-11491 · GHSA-5432-gqxr-48c4

wonderwhy-er DesktopCommanderMCP command-manager.ts CommandManager os command injection

MEDIUM 57

A vulnerability was found in wonderwhy-er DesktopCommanderMCP up to 0.2.13.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.04296 Published 2025-10-08 No fix listed CWE-77

TI-2025-10526 CVE-2025-11490 · GHSA-j878-h566-h85x

MEDIUM 57

A vulnerability has been found in wonderwhy-er DesktopCommanderMCP up to 0.2.13.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.03542 Published 2025-10-08 No fix listed CWE-77

TI-2025-10525 CVE-2025-11489 · GHSA-2jf9-5hf7-r448

MEDIUM 44

A security vulnerability has been detected in wonderwhy-er DesktopCommanderMCP up to 0.2.13.

CVSS 4.0LOW 2.0 Local Low privileges No interaction EPSS 0.00254 Published 2025-10-08 No fix listed CWE-59