Skip to contentJlowin Fastmcp vulnerabilities
- jlowin fastmcp, red hat openshift ai (rhoai), satellite 6.18 +2 moreFastMCP OpenAPI Provider has an SSRF & Path Traversal VulnerabilityCVE-2026-32871Fix available10.0 Critical
- jlowin fastmcpFastMCP: Missing Consent Verification in OAuth Proxy Callback Facilitates Confused Deputy VulnerabilitiesCVE-2026-27124Fix available8.2 High
- jlowin fastmcpFastMCP has a Command Injection vulnerability - Gemini CLICVE-2025-64340Fix available6.7 Medium
- jlowin fastmcp, red hat developer hub, openshift ai (rhoai) +1 more +3 moreFastMCP OAuth Proxy token reuse across MCP serversCVE-2025-69196Fix available7.4 High
- jlowin fastmcpFastMCP vulnerable to windows command injection in FastMCP Cursor installer via server_nameCVE-2025-62801Fix available5.4 Medium
- jlowin fastmcpFastMCP vulnerable to reflected XSS in client's callback pageCVE-2025-62800Fix available5.3 Medium