CVE-2025-64340 FastMCP has a Command Injection vulnerability - Gemini CLI

FastMCP is the standard framework for building MCP applications. Prior to version 3.2.0, server names containing shell metacharacters e.g., & can cause command injection on Windows when passed to fastmcp install claude-code or fastmcp install gemini-cli. These install paths use subprocess.run wit...

FastMCP operating system command injection vulnerability

FastMCP is a MCP server building software developed by Jeremiah Lowin. Versions of FastMCP prior to 3.2.0 contained an operating system command injection vulnerability. This vulnerability could be exploited when a server name containing a shell metacharacter was used; commands could be executed o...

CVE-2026-27124: Unintended Proxy or Intermediary

FastMCP is the standard framework for building MCP applications. Prior to version 3.2.0, while testing the GitHubProvider OAuth integration, which allows authentication to a FastMCP MCP server via a FastMCP OAuthProxy using GitHub OAuth, it was discovered that the FastMCP OAuthProxy does not...

FastMCP security vulnerabilities

FastMCP is a MCP server building software developed by Jeremiah Lowin. Versions of FastMCP prior to 3.2.0 contained security vulnerabilities; these vulnerabilities stemmed from incorrect user authorization verification by OAuthProxy, which could lead to rogue agent attacks...

CVE-2025-64340: Improper Neutralization of Special Elements used in an OS Command

FastMCP is the standard framework for building MCP applications. Prior to version 3.2.0, server names containing shell metacharacters e.g., & can cause command injection on Windows when passed to fastmcp install claude-code or fastmcp install gemini-cli. These install paths use subprocess.run wit...

CVE-2026-32871

FastMCP is a Pythonic way to build MCP servers and clients. Prior to version 3.2.0, the OpenAPIProvider in FastMCP exposes internal APIs to MCP clients by parsing OpenAPI specifications. The RequestDirector class is responsible for constructing HTTP requests to the backend service. A vulnerabilit...

CVE-2026-32871 FastMCP OpenAPI Provider has an SSRF & Path Traversal Vulnerability

FastMCP is a Pythonic way to build MCP servers and clients. Prior to version 3.2.0, the OpenAPIProvider in FastMCP exposes internal APIs to MCP clients by parsing OpenAPI specifications. The RequestDirector class is responsible for constructing HTTP requests to the backend service. A vulnerabilit...

CVE-2026-32871 FastMCP OpenAPI Provider has an SSRF & Path Traversal Vulnerability

FastMCP is a Pythonic way to build MCP servers and clients. Prior to version 3.2.0, the OpenAPIProvider in FastMCP exposes internal APIs to MCP clients by parsing OpenAPI specifications. The RequestDirector class is responsible for constructing HTTP requests to the backend service. A vulnerabilit...

aa-rag (0.4.3), acex (>=3.0.0, <=6.17.0) +915 more potentially affected by CVE-2026-32871 via fastmcp (>=0.1.0, <=3.1.1)

fastmcp PYPI version =0.1.0, =3.0.0, =0.2.0, =0.1.0, =1.0.1, =1.0.2, =0.5.0, =0.1.7rc1, =2.1.7, =0.1.0, =1.0.0, =1.0.1 and more Source cves: CVE-2026-32871 Source advisory: MEND:CVE-2026-32871...

CVE-2026-32871

FastMCP is a Pythonic way to build MCP servers and clients. Prior to version 3.2.0, the OpenAPIProvider in FastMCP exposes internal APIs to MCP clients by parsing OpenAPI specifications. The RequestDirector class is responsible for constructing HTTP requests to the backend service. A vulnerabilit...

CVE-2026-32871

CVE-2026-32871 affects FastMCP’s OpenAPIProvider in the FastMCP package (prior to 3.2.0). The root cause is that the _build_url() function substitutes path parameters directly into the URL without URL-encoding, and then urllib.parse.urljoin() interprets any embedded “../” as a directory traversal...

FastMCP security vulnerabilities

FastMCP is a MCP server building software developed by Jeremiah Lowin. Versions of FastMCP prior to 3.2.0 contained security vulnerabilities. These vulnerabilities stemmed from the lack of URL encoding for path parameters, which could lead to credential-stealing request forge attacks...

CVE-2026-32871: Server-Side Request Forgery (SSRF)

FastMCP is a Pythonic way to build MCP servers and clients. Prior to version 3.2.0, the OpenAPIProvider in FastMCP exposes internal APIs to MCP clients by parsing OpenAPI specifications. The RequestDirector class is responsible for constructing HTTP requests to the backend service. A vulnerabilit...

iflow-mcp-kdoronin-figma-mcp (>=0.1.0, <=0.1.1), rootly-mcp-server (>=2.0.0, <=2.0.1) potentially affected by CVE-2026-32871 via fastmcp (2.4.0)

fastmcp PYPI version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - iflow-mcp-kdoronin-figma-mcp =0.1.0, =2.0.0, =2.0.1 Source cves: CVE-2026-32871 Source advisory: OSV:GHSA-VV7Q-7JX5-F767...

Server-side Request Forgery (SSRF)

Overview fastmcp is a The fast, Pythonic way to build MCP servers and clients. Affected versions of this package are vulnerable to Server-side Request Forgery SSRF in the buildurl function. An attacker can access unauthorized internal backend endpoints and perform actions with elevated privileges...

GHSA-VV7Q-7JX5-F767 FastMCP OpenAPI Provider has an SSRF & Path Traversal Vulnerability

Technical Description The OpenAPIProvider in FastMCP exposes internal APIs to MCP clients by parsing OpenAPI specifications. The RequestDirector class is responsible for constructing HTTP requests to the backend service. A critical vulnerability exists in the buildurl method. When an OpenAPI...

agent-mcp-server (0.0.4.0), beads-mcp (>=0.30.1, <=0.47.1) +10 more potentially affected by CVE-2026-32871 via fastmcp (2.14.1)

fastmcp PYPI version 2.14.1 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - agent-mcp-server 0.0.4.0 - beads-mcp =0.30.1, =1.36.5, =0.2.0, =0.0.3, =0.11.0, =0.1.14, =8.5.0, =0.3.1, =0.2.0, =0.2.6 Source cves: CVE-2026-328...

complexipy-mcp (>=0.1.0, <=0.1.1), gyy-mcp (>=1.0.0, <=1.1.2) +19 more potentially affected by CVE-2026-32871 via fastmcp (2.14.2)

fastmcp PYPI version 2.14.2 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - complexipy-mcp =0.1.0, =1.0.0, =1.1.2 - oracle-oci-cloud-guard-mcp-server 1.1.2 - oracle-oci-cloud-mcp-server 1.1.2 -...

beads-mcp (>=0.47.2, <=0.49.1), fs-mcp (>=1.6.0, <=1.47.3) +4 more potentially affected by CVE-2026-32871 via fastmcp (2.14.3)

fastmcp PYPI version 2.14.3 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - beads-mcp =0.47.2, =1.6.0, =1.0.0, =1.0.1, =0.2.5, =0.2.6 - zap-ai 0.4.0 Source cves: CVE-2026-32871 Source advisory: OSV:GHSA-VV7Q-7JX5-F767...

beads-mcp (>=0.49.2, <=0.49.6), callmymcp (1.0.0) +5 more potentially affected by CVE-2026-32871 via fastmcp (2.14.4)

fastmcp PYPI version 2.14.4 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - beads-mcp =0.49.2, =0.0.1, =0.2.7, =0.2.8 - upstock-mcp 2.2.0 Source cves: CVE-2026-32871 Source advisory: OSV:GHSA-VV7Q-7JX5-F767...