DesktopCommanderMCP is vulnerable to SSRF

Description

A vulnerability was identified in wonderwhy-er DesktopCommanderMCP 0.2.37. This affects the function readFileFromUrl of the file src/tools/filesystem.ts of the component read_file. Such manipulation of the argument url leads to server-side request forgery. The attack may be performed from remote. The exploit is publicly available and might be used.

Recommendation

No fix is available yet. Followings are affected versions:

• <= 0.2.37

References

• GHSA-5xx3-j724-wmx5
• vuldb.com
• CVE-2026-10690
• CWE-918
• CAPEC-310
• OWASP 2021-A10
• OWASP 2021-A6

Related Issues

• DesktopCommanderMCP is vulnerable to Uncontrolled Resource Consumption - CVE-2026-10691
• pdfmake is vulnerable to server-side request forgery (SSRF) - CVE-2026-26801
• MagicMirror vulnerable to unauthenticated SSRF via /cors endpoint - CVE-2026-42281
• Angular SSR is vulnerable to SSRF and Header Injection via request handling pipeline - CVE-2026-27739

You might also like:

CSRF, XXE, and 12 Other Security Acronyms Explained

10 Secure Coding Best Practices to Follow in Every Project

Update Cheat Sheet for Developers

Tags:

npm

@wonderwhy-er/desktop-commander