CVE-2026-102610

The fast-agent framework (prior to version 0.7.21 ) is vulnerable to unauthenticated access because the fast-agent serve command binds to 0.0.0.0 on port 8000 without authentication. Any network client reaching the /mcp endpoint can invoke exposed agent tools. If started with the --shell flag, an...