# CVE-2026-10690: wonderwhy-er DesktopCommanderMCP SSRF in readFileFromUrl

Source: https://junglewise.ai/threats/cve-2026-10690-wonderwhy-er-desktopcommandermcp-ssrf-in-readfilefromurl  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-06-03. Updated: 2026-09-25  
License: CC BY 4.0 with a link back

CVE-2026-10690 · Severity: medium · CVSS 6.3 · Published 2026-06-03

DesktopCommanderMCP is an MCP server that provides AI assistants (Claude, Gemini, Cursor) with file system and terminal access. A server-side request forgery vulnerability in the read_file tool allows unauthenticated remote requests to internal networks, cloud metadata endpoints, and any host reachable from the server—enabling an attacker to exfiltrate sensitive data by injecting a malicious URL into the AI agent's prompt.

Technologies: [Wonderwhy-Er DesktopCommanderMCP](https://junglewise.ai/threats/technologies/desktopcommandermcp). Vendors: [npm](https://junglewise.ai/threats/vendors/npm), [Wonderwhy-Er](https://junglewise.ai/threats/vendors/wonderwhy-er).

## Quick answers

**Is CVE-2026-10690 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-10690 being exploited in the wild.

**How severe is CVE-2026-10690?** Medium severity, with a CVSS score of 6.3, published 3 June 2026.

**Which products and versions are affected?** @wonderwhy-er/desktop-commander (npm) <= 0.2.37, SEMVER:introduced=0,last_affected=0.2.37; Wonderwhy-Er Desktop-Commander 0.2.37 and earlier; Wonderwhy-Er DesktopCommanderMCP <= 0.2.37, 0.2.37.

**Is there a fix for CVE-2026-10690?** A patch was published on 2026: Patch available at commit 53699bebba9950047bca16ac4dc8f0568f596aaa Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-10690 attacked?** It is attacked over the network, in a software library.

**Am I affected by CVE-2026-10690?** Check whether you run @wonderwhy-er/desktop-commander (npm), Wonderwhy-Er Desktop-Commander or Wonderwhy-Er DesktopCommanderMCP at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A server-side request forgery (SSRF) vulnerability exists in the readFileFromUrl() function in src/tools/filesystem.ts. The vulnerability is triggered when the read_file tool is invoked with isUrl set to true; the user-supplied path parameter is passed directly to Node.js fetch() without validation of destination host, IP range, or protocol. No allowlist, blocklist of private IP ranges (127.x, 10.x, 172.16-31.x, 192.168.x, 169.254.x), or URL scheme restrictions are enforced. An attacker can perform prompt injection into an AI agent integrated with DesktopCommanderMCP, instructing it to invoke read_file with an internal URL (e.g., cloud metadata endpoints or admin interfaces). The agent, unaware of SSRF risks, will comply; the server fetches the URL and returns the full response body to the agent, enabling data exfiltration. A patch addressing URL validation is available at commit 53699bebba9950047bca16ac4dc8f0568f596aaa.

## Affected products

- wonderwhy-er @wonderwhy-er/desktop-commander 0.2.37 and earlier

## Identifiers

- CVE-2026-10690
- GHSA-5xx3-j724-wmx5

## Timeline

- 2026-06-03: disclosed: Vulnerability published; exploit publicly available
- 2026-07-10: advisory: GitHub security advisory GHSA-5xx3-j724-wmx5 published and reviewed
- 2026: patched: Patch available at commit 53699bebba9950047bca16ac4dc8f0568f596aaa

## References

- [https://github.com/wonderwhy-er/DesktopCommanderMCP/issues/410](https://github.com/wonderwhy-er/DesktopCommanderMCP/issues/410)
- [https://github.com/sorlen008/DesktopCommanderMCP/commit/53699bebba9950047bca16ac4dc8f0568f596aaa](https://github.com/sorlen008/DesktopCommanderMCP/commit/53699bebba9950047bca16ac4dc8f0568f596aaa)
- [https://github.com/wonderwhy-er/DesktopCommanderMCP](https://github.com/wonderwhy-er/DesktopCommanderMCP)
- [https://vuldb.com/cve/CVE-2026-10690](https://vuldb.com/cve/CVE-2026-10690)
- [https://vuldb.com/submit/830735](https://vuldb.com/submit/830735)
- [https://vuldb.com/vuln/367959](https://vuldb.com/vuln/367959)

## Related threats

- [wonderwhy-er DesktopCommanderMCP ReDoS in search-manager](https://junglewise.ai/threats/cve-2026-10691-wonderwhy-er-desktopcommandermcp-redos-in-search-manager)
- [A vulnerability was found in wonderwhy-er DesktopCommanderMCP up to 0.2.13. The impacted element is the function…](https://junglewise.ai/threats/cve-2025-11491-a-vulnerability-was-found-in-wonderwhy-er-desktopcommandermcp-up)
- [A vulnerability has been found in wonderwhy-er DesktopCommanderMCP up to 0.2.13. The affected element is the function…](https://junglewise.ai/threats/cve-2025-11490-a-vulnerability-has-been-found-in-wonderwhy-er)
- [A security vulnerability has been detected in wonderwhy-er DesktopCommanderMCP up to 0.2.13. This vulnerability…](https://junglewise.ai/threats/cve-2025-11489-a-security-vulnerability-has-been-detected-in-wonderwhy-er)