Search results

[Security] Command Blocklist Bypass via Newline Injection in start_process — Unfixed Since April 2026 (Issue #422)

Status: Open.

#556 In wonderwhy-er/DesktopCommanderMCP;

· nobugpal opened on Jul 10, 2026

[Security] Command Blocklist Bypass via Shell Variable Expansion ${} in start_process — New Variant

Status: Open.

#555 In wonderwhy-er/DesktopCommanderMCP;

· nobugpal opened on Jul 10, 2026

edit_block silently truncates file to pre-edit byte length when replacement grows the file

Status: Open.

#554 In wonderwhy-er/DesktopCommanderMCP;

· Haseeb-1698 opened on Jul 10, 2026

interact_with_process bypasses blockedCommands — missing validateCommand() call in interactWithProcess()

Status: Open.

#552 In wonderwhy-er/DesktopCommanderMCP;

· nobugpal opened on Jul 10, 2026

[Security] interact_with_process bypasses blockedCommands - new variant of known limitation

Status: Open.

#548 In wonderwhy-er/DesktopCommanderMCP;

· nobugpal opened on Jul 9, 2026

Undisclosed prompt-injection payload + auto-opened browser tab; package was never manually installed

Status: Open.

#543 In wonderwhy-er/DesktopCommanderMCP;

· jecanore opened on Jul 8, 2026

write_file hangs and never reaches the tool handler when called from the claude.ai remote client (v0.2.43 DXT)

Status: Open.

#532 In wonderwhy-er/DesktopCommanderMCP;

· vinsonconsulting opened on Jul 1, 2026

write_file should auto-create missing parent directories (or add a recursive option)

Status: Open.

#525 In wonderwhy-er/DesktopCommanderMCP;

· hl9020 opened on Jun 25, 2026

MS Defender flags as remote shell

Status: Open.

#511 In wonderwhy-er/DesktopCommanderMCP;

· mdunc opened on Jun 14, 2026

initialize handshake intermittently exceeds 60s host timeout — blocked by feature-flag network refresh; not gated by telemetryEnabled

Status: Open.

#510 In wonderwhy-er/DesktopCommanderMCP;

· JEM-Fizbit opened on Jun 14, 2026

Resolve spawned executables by absolute path

Status: Open.

#509 In wonderwhy-er/DesktopCommanderMCP;

· quintessence-proof opened on Jun 10, 2026

Restrict markdown link navigation to safe URI schemes

Status: Open.

#508 In wonderwhy-er/DesktopCommanderMCP;

· quintessence-proof opened on Jun 10, 2026