Command Injection

FastMCP is vulnerable to a command injection. The vulnerability is due to improper sanitization of the servername field in MCP, which allows an attacker to inject and execute arbitrary operating system commands on Windows hosts...