CVE-2026-32871
Server-side request forgery in Jlowin Fastmcp
CVSS score
10.0
EPSS probability
%1.4
Risk score
0.1
Published
6 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
https://github.com/PrefectHQ/fastmcp/security/advisories/GHSA-vv7q-7jx5-f767
Makefile Go / Python
Similar Vulnerabilities
7.8
CVE-2025-64340OS command injection in Jlowin Fastmcp
Patch verifiedEPSS %1
6.5
CVE-2025-69196Incorrect authorization in Jlowin Fastmcp
Patch status unknown Public Exploits:1EPSS %0
6.1
CVE-2026-27124Vulnerability in Jlowin Fastmcp
Patch status unknown Public Exploits:1EPSS %0
7.8
CVE-2025-62801OS command injection in Jlowin Fastmcp
Patch status unknown Public Exploits:1EPSS %0
6.1
CVE-2025-62800Cross-site scripting in Jlowin Fastmcp
Patch status unknown Public Exploits:1EPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-32871"