All products

fast-agent-mcp

PyPI · Package
1 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
fast-agent: `fast-agent serve` binds HTTP to 0.0.0.0 with no authentication by default; with --shell this is unauthenticated remote command executionCVE-2026-102610 · GHSA-9VHV-G5HF-M7M7 fast-agent-mcp PyPI Medium Fix reported