Search results

Idea: opt-in monetization layer for MCP tool responses

Status: Open.

#613 In wonderwhy-er/DesktopCommanderMCP;

· Lulu-The-Narwhal opened on Jul 25, 2026

read_file does not decode UTF-16 LE files created by Windows PowerShell 5.1

Status: Open.

#610 In wonderwhy-er/DesktopCommanderMCP;

· lAiasu opened on Jul 24, 2026

Offer: catch strict-client schema breaks before users do

Status: Open.

#608 In wonderwhy-er/DesktopCommanderMCP;

· fixlyai opened on Jul 23, 2026

Server opens a browser window (analytics-tagged welcome page) during MCP initialize

Status: Open.

#602 In wonderwhy-er/DesktopCommanderMCP;

· varun29ankuS opened on Jul 19, 2026

[v0.2.46 remote] Process and search sessions do not reliably preserve device affinity in multi-device setups

Status: Open.

#599 In wonderwhy-er/DesktopCommanderMCP;

· prayer7777777 opened on Jul 18, 2026

🔒 Security: Environment variable inheritance + MCP_SERVER_URL SSRF leading to OAuth token theft

Status: Open.

#594 In wonderwhy-er/DesktopCommanderMCP;

· Correctover opened on Jul 17, 2026

MCP server becomes unresponsive mid-session; all tool calls hang (no result after 4+ min); persists across Claude Desktop restart

Status: Open.

#591 In wonderwhy-er/DesktopCommanderMCP;

· Mabdurahman68 opened on Jul 16, 2026

macOS: allowedDirectories rejects /tmp paths after realpath resolves them to /private/tmp

Status: Open.

#590 In wonderwhy-er/DesktopCommanderMCP;

· victorgulchenko opened on Jul 16, 2026

update readme

Status: Open.

#589 In wonderwhy-er/DesktopCommanderMCP;

· meir-may opened on Jul 16, 2026

[Security] SSRF via read_file tool — no URL validation in readFileFromUrl()

Status: Open.

#587 In wonderwhy-er/DesktopCommanderMCP;

· Correctover opened on Jul 15, 2026

Intermittent wrong-device routing in multi-device setup despite explicit deviceId

Status: Open.

#586 In wonderwhy-er/DesktopCommanderMCP;

· eumel1982 opened on Jul 14, 2026

[SECURITY] High: Command Blocklist Bypass via Process Substitution and node:local

Status: Open.

#580 In wonderwhy-er/DesktopCommanderMCP;

· Correctover opened on Jul 11, 2026