Evalstate Fast-agent vulnerabilities

• evalstate fast-agent fast-agent: `fast-agent serve` binds HTTP to 0.0.0.0 with no authentication by default; with --shell this is unauthenticated remote command execution CVE-2026-102610 6.4 MediumNovember 6, 2026