EUVD-2026-118496

fast-agent is a framework for building, running, and evaluating AI agents with Model Context Protocol support. Prior to 0.7.21, fast-agent serve uses HTTP transport bound to 0.0.0.0 on port 8000 without authentication, allowing any network client that can reach the /mcp endpoint to invoke the...

CVE-2026-102610

The fast-agent framework (prior to version 0.7.21 ) is vulnerable to unauthenticated access because the fast-agent serve command binds to 0.0.0.0 on port 8000 without authentication. Any network client reaching the /mcp endpoint can invoke exposed agent tools. If started with the --shell flag, an...