—PyPI
PYSEC-2026-1364· CVE-2025-62800, GHSA-mxxr-jv3v-6pgcFastMCP vulnerable to reflected XSS in client's callback page
Modified: 7/7/2026
package
PyPI/fastmcp
pkg:pypi/fastmcp
—PyPI
PYSEC-2026-1365· CVE-2025-62801, GHSA-rj5c-58rq-j5g5FastMCP vulnerable to windows command injection in FastMCP Cursor installer via server_name
Modified: 7/7/2026
—PyPI
PYSEC-2026-2474· CVE-2025-69196, GHSA-5h2m-4q8j-pqpjFastMCP OAuth Proxy token reuse across MCP servers
Modified: 7/13/2026
MEDIUM6.7PyPI
PYSEC-2026-2475· CVE-2025-64340, GHSA-m8x7-r2rg-vh5gFastMCP has a Command Injection vulnerability - Gemini CLI
Modified: 7/13/2026
—PyPI
PYSEC-2026-2476· CVE-2026-27124, GHSA-rww4-4w9c-7733FastMCP: Missing Consent Verification in OAuth Proxy Callback Facilitates Confused Deputy Vulnerabilities
Modified: 7/13/2026
CRITICAL10.0PyPI
PYSEC-2026-338· CVE-2026-32871, GHSA-vv7q-7jx5-f767FastMCP OpenAPI Provider has an SSRF & Path Traversal Vulnerability
Modified: 7/1/2026
HIGHPyPI
GHSA-5h2m-4q8j-pqpj· CVE-2025-69196, PYSEC-2026-2474FastMCP OAuth Proxy token reuse across MCP servers
Modified: 7/13/2026
HIGHPyPI
GHSA-c2jp-c369-7pvxFastMCP Auth Integration Allows for Confused Deputy Account Takeover
Modified: 2/3/2026
MEDIUM6.7PyPI
GHSA-m8x7-r2rg-vh5g· CVE-2025-64340, PYSEC-2026-2475FastMCP has a Command Injection vulnerability - Gemini CLI
Modified: 9/10/2026
MEDIUMPyPI
GHSA-mxxr-jv3v-6pgc· CVE-2025-62800, PYSEC-2026-1364FastMCP vulnerable to reflected XSS in client's callback page
Modified: 7/7/2026
HIGHPyPI
GHSA-rcfx-77hg-w2wvFastMCP updated to MCP 1.23+ due to CVE-2025-66416
Modified: 12/26/2025
MEDIUMPyPI
GHSA-rj5c-58rq-j5g5· CVE-2025-62801, PYSEC-2026-1365FastMCP vulnerable to windows command injection in FastMCP Cursor installer via server_name
Modified: 7/7/2026
HIGHPyPI
GHSA-rww4-4w9c-7733· CVE-2026-27124, PYSEC-2026-2476FastMCP: Missing Consent Verification in OAuth Proxy Callback Facilitates Confused Deputy Vulnerabilities
Modified: 9/10/2026
CRITICAL10.0PyPI
GHSA-vv7q-7jx5-f767· CVE-2026-32871, PYSEC-2026-338FastMCP OpenAPI Provider has an SSRF & Path Traversal Vulnerability
Modified: 9/10/2026