fastmcp vulnerabilities (Root)
7 vulnerabilities.
-
fastmcpRoot FastMCP OpenAPI Provider has an SSRF & Path Traversal Vulnerability 10.0 Critical -
fastmcpRoot FastMCP: Missing Consent Verification in OAuth Proxy Callback Facilitates Confused Deputy Vulnerabilities 8.2 High -
fastmcpRoot FastMCP has a Command Injection vulnerability - Gemini CLI 6.7 Medium -
fastmcpRoot FastMCP OAuth Proxy token reuse across MCP servers 7.4 High -
fastmcpRoot FastMCP Auth Integration Allows for Confused Deputy Account Takeover 7.3 High -
fastmcpRoot FastMCP vulnerable to windows command injection in FastMCP Cursor installer via server_name 5.4 Medium -
fastmcpRoot FastMCP vulnerable to reflected XSS in client's callback page 5.3 Medium