medium6.3
CVE-2025-11491
A vulnerability was found in wonderwhy-er DesktopCommanderMCP up to 0.2.13.
Impact
A vulnerability was found in wonderwhy-er DesktopCommanderMCP up to 0.2.13. The impacted element is the function CommandManager of the file src/command-manager.ts. Performing manipulation results in os command injection. It is possible to initiate the attack remotely. The exploit has been made public and could be used.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wonderwhy-Er | Desktopcommandermcp | through 0.2.13 |