Filtered by vendor Jlowin Subscriptions
Filtered by product Fastmcp Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2025-62801 2 Fastmcp, Jlowin 2 Fastmcp, Fastmcp 2025-11-04 7.8 High
FastMCP is the standard framework for building MCP applications. Versions prior to 2.13.0, a command-injection vulnerability lets any attacker who can influence the server_name field of an MCP execute arbitrary OS commands on Windows hosts that run fastmcp install cursor. This vulnerability is fixed in 2.13.0.