FastMCP vulnerabilities and CVEs
The Beam CVE database tracks 8 security advisories for FastMCP: 1 critical, 4 high and 3 medium severity. The newest is CVE-2025-64340, published Mar 31, 2026 and fixed in 3.2.0.
A popular Python framework for building MCP servers and clients.
Check your version: pip show fastmcp
- Vulnerabilities tracked
- 8
- Critical
- 1
- Known exploited (CISA KEV)
- 0
- Published in the last 30 days
- 0
All entries, newest first
CVE-2025-64340
FastMCP has a Command Injection vulnerability - Gemini CLI
medium6.7Mar 31, 2026CVE-2026-27124
FastMCP: Missing Consent Verification in OAuth Proxy Callback Facilitates Confused Deputy Vulnerabilities
high8.2Mar 31, 2026CVE-2026-32871
FastMCP OpenAPI Provider has an SSRF & Path Traversal Vulnerability
critical10.0Mar 31, 2026CVE-2025-69196
FastMCP OAuth Proxy token reuse across MCP servers
high7.4Mar 16, 2026GHSA-rcfx-77hg-w2wv
FastMCP updated to MCP 1.23+ due to CVE-2025-66416
highDec 26, 2025CVE-2025-62800
FastMCP vulnerable to reflected XSS in client's callback page
medium5.3Oct 29, 2025CVE-2025-62801
FastMCP vulnerable to windows command injection in FastMCP Cursor installer via server_name
medium5.4Oct 29, 2025GHSA-c2jp-c369-7pvx
FastMCP Auth Integration Allows for Confused Deputy Account Takeover
high7.3Oct 29, 2025