FastMCP vulnerabilities and CVEs
The Beam CVE database tracks 10 security advisories for FastMCP: 1 critical, 4 high and 5 medium severity. The newest is GHSA-7xgj-8392-5q4r, published Oct 23, 2026 and fixed in 3.4.10, 4.1.2.
A popular Python framework for building MCP servers and clients.
Check your version: pip show fastmcp
- Vulnerabilities tracked
- 10
- Critical
- 1
- Known exploited (CISA KEV)
- 0
- Published in the last 30 days
- 2
All entries, newest first
GHSA-7xgj-8392-5q4r
FastMCP: Post-transform component authorization is skipped on direct calls
medium6.8Oct 23, 2026GHSA-vqqp-x5qm-5qp4
FastMCP MCP client wrappers construct M2M OAuth providers without issuer binding — client secret redirectable to attacker-advertised authorization server
medium5.9Oct 23, 2026CVE-2025-64340
FastMCP has a Command Injection vulnerability - Gemini CLI
medium6.7Mar 31, 2026CVE-2026-27124
FastMCP: Missing Consent Verification in OAuth Proxy Callback Facilitates Confused Deputy Vulnerabilities
high8.2Mar 31, 2026CVE-2026-32871
FastMCP OpenAPI Provider has an SSRF & Path Traversal Vulnerability
critical10.0Mar 31, 2026CVE-2025-69196
FastMCP OAuth Proxy token reuse across MCP servers
high7.4Mar 16, 2026GHSA-rcfx-77hg-w2wv
FastMCP updated to MCP 1.23+ due to CVE-2025-66416
highDec 26, 2025CVE-2025-62800
FastMCP vulnerable to reflected XSS in client's callback page
medium5.3Oct 29, 2025CVE-2025-62801
FastMCP vulnerable to windows command injection in FastMCP Cursor installer via server_name
medium5.4Oct 29, 2025GHSA-c2jp-c369-7pvx
FastMCP Auth Integration Allows for Confused Deputy Account Takeover
high7.3Oct 29, 2025