VULNRABLE / Vulnerability / GHSA-7xgj-8392-5q4r
GHSA-7xgj-8392-5q4r
MEDIUM LOW fastmcp GHSA
Exploit verdict: No active-exploit signal
CVSS Score
5.5
Severity
MEDIUM
EPSS
—
Source
GHSA
Summary
FastMCP: Post-transform component authorization is skipped on direct calls
What this means
GHSA-7xgj-8392-5q4r is a medium-severity vulnerability affecting fastmcp, rated CVSS 5.5. Published October 23, 2026.
View full advisory at GHSA →