CVE-2026-32871Critical· 10.0▾ Midnight

FastMCP is a Pythonic way to build MCP servers and clients

FastMCP is a Pythonic way to build MCP servers and clients. Prior to version 3.2.0, the OpenAPIProvider in FastMCP exposes internal APIs to MCP clients by parsing OpenAPI specifications. The RequestDirector class is responsible for const…

▾ Midnight zone — Critical, or high with PoC / in-the-wild

Depth score55/ 100 · Moderate

impact 55 · likelihood 0.2 · exploitation 0

🔒

Full detail requires an account

The latest CVEs are free to read. CVE-2026-32871 is outside the free window — sign in (free) to view the full technical detail, affected versions, references, and raw markdown.