{"data":{"id":"0af4e7a5-4e5f-40fc-9cc0-fd5780f20ead","title":"GHSA-vv7q-7jx5-f767: FastMCP OpenAPI Provider has an SSRF & Path Traversal Vulnerability","summary":"GHSA-vv7q-7jx5-f767 affects the OpenAPIProvider in FastMCP, which parses OpenAPI specifications to expose internal APIs to MCP clients. The _build_url() method in fastmcp/utilities/openapi/director.py substitutes path parameter values into URL templates without URL-encoding, and urljoin() then resolves ../ sequences, letting an attacker reach arbitrary backend endpoints. Because requests carry the MCP provider's configured authorization headers, the flaw results in authenticated SSRF.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-vv7q-7jx5-f767","publishedAt":"2026-03-31T22:53:21.000Z","cveId":"CVE-2026-32871","cweIds":["CWE-918"],"cvssScore":"10","cvssSeverity":"critical","severity":"critical","attackType":["other"],"issueType":"vulnerability","affectedPackages":["fastmcp@< 3.2.0 (fixed: 3.2.0)"],"affectedPackageNames":["fastmcp"],"affectedVendors":[],"affectedVendorsRaw":["FastMCP"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","attackVector":"network","attackComplexity":"low","privilegesRequired":"none","userInteraction":"none","exploitMaturity":"unknown","epssScore":0.01369,"epssCheckedAt":"2026-10-10T04:57:22.801Z","kevDateAdded":null,"advisoryAliases":["GHSA-vv7q-7jx5-f767"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-03-31T22:53:21.000Z","capecIds":["CAPEC-664"],"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality","integrity"],"aiComponentTargeted":"plugin","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null}}