desktopcommandermcp vulnerabilities and fixes
Recent CVEs affecting desktopcommandermcp, with upgrade or downgrade steps. 3 tracked.
desktopcommandermcp has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2025-10-08. Highest priority: CVE-2025-11491 (score 50/100).
- CVE-2025-11491 MEDIUM 6.3 UPGRADE A vulnerability was found in wonderwhy-er DesktopCommanderMCP up to 0.2.13
- CVE-2025-11490 MEDIUM 6.3 UPGRADE A vulnerability has been found in wonderwhy-er DesktopCommanderMCP up to 0.2.13
- CVE-2025-11489 MEDIUM 4.5 UPGRADE A security vulnerability has been detected in wonderwhy-er DesktopCommanderMCP up to 0.2.13
FAQ
How do I fix desktopcommandermcp vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is desktopcommandermcp being exploited right now?
None of the tracked desktopcommandermcp CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which desktopcommandermcp CVE should I patch first?
CVE-2025-11491 currently ranks highest (50/100): A vulnerability was found in wonderwhy-er DesktopCommanderMCP up to 0.2.13.