Vulnerabilities for fastmcp

First version without a known vulnerability: 3.2.0

Details

• GHSA-vv7q-7jx5-f7672026-03-31

  FastMCP OpenAPI Provider has an SSRF & Path Traversal Vulnerability

  Fixed in: 3.2.0

• GHSA-rww4-4w9c-77332026-03-31

  FastMCP: Missing Consent Verification in OAuth Proxy Callback Facilitates Confused Deputy Vulnerabilities

  Fixed in: 3.2.0

• GHSA-m8x7-r2rg-vh5g2026-03-31

  FastMCP has a Command Injection vulnerability - Gemini CLI

  Fixed in: 3.2.0

• GHSA-5h2m-4q8j-pqpj2026-03-16

  FastMCP OAuth Proxy token reuse across MCP servers

  Fixed in: 2.14.2

• GHSA-rcfx-77hg-w2wv2025-12-26

  FastMCP updated to MCP 1.23+ due to CVE-2025-66416

  Fixed in: 2.14.0

• GHSA-rj5c-58rq-j5g52025-10-29

  FastMCP vulnerable to windows command injection in FastMCP Cursor installer via server_name

  Fixed in: 2.13.0

• GHSA-mxxr-jv3v-6pgc2025-10-29

  FastMCP vulnerable to reflected XSS in client's callback page

  Fixed in: 2.13.0

• GHSA-c2jp-c369-7pvx2025-10-29

  FastMCP Auth Integration Allows for Confused Deputy Account Takeover

  Fixed in: 2.13.0