core-for-ai (>=0.1.91, <=0.1.97), oterm (0.11.2) potentially affected by CVE-2025-64340 via fastmcp (2.2.6)

fastmcp PYPI version 2.2.6 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - core-for-ai =0.1.91, =0.1.97 - oterm 0.11.2 Source cves: CVE-2025-64340 Source advisory: OSV:GHSA-M8X7-R2RG-VH5G...

PT-2026-29413

Name of the Vulnerable Software and Affected Versions FastMCP versions prior to 3.2.0 Description FastMCP, a framework for building MCP applications, is susceptible to command injection on Windows systems when server names contain shell metacharacters, such as &. This occurs during the fastmcp...

Security Bulletin: Command Injection Vulnerability in FastMCP server_name Field Enables Arbitrary Command Execution on Windows affects watsonx.data

Summary FastMCP is the standard framework for building MCP applications. Versions prior to 2.13.0, a command-injection vulnerability lets any attacker who can influence the servername field of an MCP execute arbitrary OS commands on Windows hosts that run fastmcp install cursor. This can affect...

CVE-2025-69196

A flaw was found in FastMCP, a framework for building MCP applications. The server does not correctly process the resource parameter provided by the client during authorization and token requests. This can lead to security tokens being issued for an unintended base URL Uniform Resource Locator...

Incorrect Authorization

Overview fastmcp is a The fast, Pythonic way to build MCP servers and clients. Affected versions of this package are vulnerable to Incorrect Authorization due to improper handling of the resource parameter in the authorization and token request processes. An attacker can gain unauthorized access ...

aa-rag (0.4.3), aden-hive (>=1.0.1, <=1.0.8) +374 more potentially affected by CVE-2025-69196 via fastmcp (>=2.0.0, <=2.14.1)

fastmcp PYPI version =2.0.0, =1.0.1, =1.0.2, =0.5.0, =0.4.6, =1.8.0, =0.1.1, =2.0.0.dev1, =2.0.0.dev1, =4.0.0.dev21, =0.0.1, =0.1.0, =0.0.2a1, =0.0.2a5 and more Source cves: CVE-2025-69196 Source advisory: SNYK:PYTHON-FASTMCP-15674454...

aa-rag (0.4.3), aden-hive (>=1.0.1, <=1.0.8) +420 more potentially affected by CVE-2025-69196 via fastmcp (>=0.1.0, <=2.14.1)

fastmcp PYPI version =0.1.0, =1.0.1, =1.0.2, =0.5.0, =1.0.0, =0.4.6, =1.8.0, =0.1.1, =2.0.0.dev1, =2.0.0.dev1, =4.0.0.dev21, =0.0.1, =0.1.0, =0.1.1 and more Source cves: CVE-2025-69196 Source advisory: MEND:CVE-2025-69196...

CVE-2025-69196 FastMCP OAuth Proxy token reuse across MCP servers

FastMCP is the standard framework for building MCP applications. Prior to version 2.14.2, the server does not properly respect the resource parameter submitted by the client in the authorization and token request. Instead of issuing the token explicitly for the MCP server, the token is issued for...

CVE-2025-69196

The GHSA advisory GHSA-5H2M-4Q8J-PQPJ describes a misconfiguration in FastMCP OAuth Proxy where the token issuer/audience are derived from the proxy’s base_url, causing access and refresh tokens to be issued without binding to the requested MCP server resource. This means tokens can be used on ot...

CVE-2025-69196 FastMCP OAuth Proxy token reuse across MCP servers

FastMCP is the standard framework for building MCP applications. Prior to version 2.14.2, the server does not properly respect the resource parameter submitted by the client in the authorization and token request. Instead of issuing the token explicitly for the MCP server, the token is issued for...

CVE-2025-69196 FastMCP OAuth Proxy token reuse across MCP servers

FastMCP is the standard framework for building MCP applications. Prior to version 2.14.2, the server does not properly respect the resource parameter submitted by the client in the authorization and token request. Instead of issuing the token explicitly for the MCP server, the token is issued for...

aa-rag (0.4.3), aden-hive (>=1.0.1, <=1.0.8) +374 more potentially affected by CVE-2025-69196 via fastmcp (>=2.0.0, <=2.14.1)

fastmcp PYPI version =2.0.0, =1.0.1, =1.0.2, =0.5.0, =0.4.6, =1.8.0, =0.1.1, =2.0.0.dev1, =2.0.0.dev1, =4.0.0.dev21, =0.0.1, =0.1.0, =0.0.2a1, =0.0.2a5 and more Source cves: CVE-2025-69196 Source advisory: GHSA-5H2M-4Q8J-PQPJ...

GHSA-5H2M-4Q8J-PQPJ FastMCP OAuth Proxy token reuse across MCP servers

While testing the OAuth Proxy implementation, it was noticed that the server does not properly respect the resource parameter submitted by the client in the authorization and token request. Instead of issuing the token explicitly for this MCP server, the token is issued for the baseurl passed to...

code-review-graph (>=1.8.0, <=2.2.3.1), iflow-mcp-automateyournetwork-aci-mcp (>=0.1.1, <=0.1.4) +4 more potentially affected by CVE-2025-69196 via fastmcp (1.0.0)

fastmcp PYPI version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - code-review-graph =1.8.0, =0.1.1, =0.1.8, =0.1.0, =0.1.0, =0.3.0 - repomind 1.8.4 Source cves: CVE-2025-69196 Source advisory:...

grizabella (>=0.1.0b1, <=0.1.1b1), pypi-query-mcp-server (0.1.0) potentially affected by CVE-2025-69196 via fastmcp (0.2.0)

fastmcp PYPI version 0.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - grizabella =0.1.0b1, =0.1.1b1 - pypi-query-mcp-server 0.1.0 Source cves: CVE-2025-69196 Source advisory: OSV:GHSA-5H2M-4Q8J-PQPJ...

helm-ai (>=0.1.0, <=0.2.5), iflow-mcp-behinduall-wiki-js-mcp (1.0.0) +4 more potentially affected by CVE-2025-69196 via fastmcp (0.1.0)

fastmcp PYPI version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - helm-ai =0.1.0, =0.1.0, =0.1.1, =0.1.12 Source cves: CVE-2025-69196 Source advisory: OSV:GHSA-5H2M-4Q8J-PQPJ...

aa-rag (0.4.3), aden-hive (>=1.0.1, <=1.0.8) +374 more potentially affected by CVE-2025-69196 via fastmcp (>=2.0.0, <=2.14.1)

fastmcp PYPI version =2.0.0, =1.0.1, =1.0.2, =0.5.0, =0.4.6, =1.8.0, =0.1.1, =2.0.0.dev1, =2.0.0.dev1, =4.0.0.dev21, =0.0.1, =0.1.0, =0.0.2a1, =0.0.2a5 and more Source cves: CVE-2025-69196 Source advisory: OSV:GHSA-5H2M-4Q8J-PQPJ...

mcp-contract-builder (>=0.0.1, <=0.0.7), mcp-contract-executor (>=0.0.1, <=0.0.7) +2 more potentially affected by CVE-2025-69196 via fastmcp (0.3.5)

fastmcp PYPI version 0.3.5 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - mcp-contract-builder =0.0.1, =0.0.1, =0.1.48, =0.1.0, =0.1.3 Source cves: CVE-2025-69196 Source advisory: OSV:GHSA-5H2M-4Q8J-PQPJ...

agentfetch-mcp (>=1.0.0, <=1.0.1), constitute-mcp (>=0.1.18, <=0.1.27) +31 more potentially affected by CVE-2025-69196 via fastmcp (0.4.1)

fastmcp PYPI version 0.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - agentfetch-mcp =1.0.0, =0.1.18, =2.0.2, =1.0.0, =0.1.0, =0.1.41, =1.0.0, =1.0.1 - iflow-mcp-philschmid-code-sandbox-mcp 0.1.0 -...

FastMCP security vulnerabilities

FastMCP is a MCP server-building software developed by Jeremiah Lowin. Versions of FastMCP prior to 2.14.2 contained security vulnerabilities. These vulnerabilities stemmed from servers failing to properly handle resource parameters submitted by clients during authorization and token requests. As...