PyPI/fastmcp CVE-2025-69196: medium 6.5, EPSS 0.38%

FastMCP OAuth Proxy token reuse across MCP servers

Action: Upgrade fastmcp to 2.14.2 or later.

pip install fastmcp==2.14.2

Affected

Fixed versions

Sources

• osv: GHSA-5h2m-4q8j-pqpj
• nvd: CVE-2025-69196
• https://github.com/PrefectHQ/fastmcp/security/advisories/GHSA-5h2m-4q8j-pqpj
• https://github.com/PrefectHQ/fastmcp

CVE-2025-69196 · published 2026-03-16T15:14:55Z · modified 2026-07-13T16:43:46.045162193Z · JSON