Skip to content
Jjlowin
Products
| Product | CVEs | Exploited | Latest |
|---|
| fastmcp | 5 | – | Apr 3, 2026 |
Exploited and recent CVEs
-
CVE-2026-27124
High 8.2
FastMCP: Missing Consent Verification in OAuth Proxy Callback Facilitates Confused Deputy Vulnerabilities
0.2%
-
CVE-2025-64340
Medium 6.7
FastMCP has a Command Injection vulnerability - Gemini CLI
0.7%
-
CVE-2025-69196
High 7.4
FastMCP OAuth Proxy token reuse across MCP servers
0.4%
-
CVE-2025-62801
Medium 5.4
FastMCP vulnerable to windows command injection in FastMCP Cursor installer via server_name
0.2%
-
CVE-2025-62800
Medium 5.3
FastMCP vulnerable to reflected XSS in client's callback page
0.3%