CVE-2026-10691
1 advisory.
npm/@wonderwhy-er/desktop-commander CVE-2026-10691: medium 4.3, EPSS 0.35%
DesktopCommanderMCP is vulnerable to Uncontrolled Resource Consumption
Action: Upgrade @wonderwhy-er/desktop-commander to 0.2.39 or later.
npm i @wonderwhy-er/desktop-commander@0.2.39Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.2.39 | - |
Fixed versions
| 0.2.39 |
Sources
- osv: GHSA-r87g-78mx-3wg4
- https://nvd.nist.gov/vuln/detail/CVE-2026-10691
- https://github.com/wonderwhy-er/DesktopCommanderMCP/issues/375
- https://github.com/wonderwhy-er/DesktopCommanderMCP/pull/400
- https://github.com/wonderwhy-er/DesktopCommanderMCP/commit/4ce845f8749b6a159b57b38dcc3357f7222a8078
- https://github.com/wonderwhy-er/DesktopCommanderMCP
- https://github.com/wonderwhy-er/DesktopCommanderMCP/releases/tag/v0.2.39
- https://vuldb.com/cve/CVE-2026-10691
- https://vuldb.com/submit/830746
- https://vuldb.com/vuln/367960
- https://vuldb.com/vuln/367960/cti
CVE-2026-10691 · published · modified · JSON