Vulnerabilities

TI-2026-09190 CVE-2026-10691 · GHSA-r87g-78mx-3wg4

wonderwhy-er DesktopCommanderMCP start_search search-manager.ts redos

MEDIUM 57

A security flaw has been discovered in wonderwhy-er DesktopCommanderMCP up to 0.2.38.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00354 Published 2026-06-02 Fixed in 0.2.39 CWE-1333

TI-2026-09189 CVE-2026-10690 · GHSA-5xx3-j724-wmx5

MEDIUM 57

A vulnerability was identified in wonderwhy-er DesktopCommanderMCP 0.2.37.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00221 Published 2026-06-02 No fix listed CWE-918

TI-2025-10527 CVE-2025-11491 · GHSA-5432-gqxr-48c4

MEDIUM 57

A vulnerability was found in wonderwhy-er DesktopCommanderMCP up to 0.2.13.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.04296 Published 2025-10-08 No fix listed CWE-77

TI-2025-10526 CVE-2025-11490 · GHSA-j878-h566-h85x

MEDIUM 57

A vulnerability has been found in wonderwhy-er DesktopCommanderMCP up to 0.2.13.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.03542 Published 2025-10-08 No fix listed CWE-77

TI-2025-10525 CVE-2025-11489 · GHSA-2jf9-5hf7-r448

MEDIUM 44

A security vulnerability has been detected in wonderwhy-er DesktopCommanderMCP up to 0.2.13.

CVSS 4.0LOW 2.0 Local Low privileges No interaction EPSS 0.00254 Published 2025-10-08 No fix listed CWE-59