CVE-2026-102610: fast-agent serve unauthenticated remote command execution via /mcp endpoint

Summary

fast-agent versions prior to 0.7.21 run `fast-agent serve` with HTTP transport bound to 0.0.0.0 on port 8000 and no authentication, so any network client that can reach the /mcp endpoint can invoke the agent tool. When the server runs with --shell, that client can run operating-system commands as the server user through the local execute tool; without --shell, it can still use the operator's model and configured MCP tools.

Mitigation

Fixed in 0.7.21.

Topics

• AI agents
• Model Context Protocol

Related items

• MediumClaude Code's “Don't Ask Again” File Exposes Passwords and Keys in 1,122 Public Copies on GitHubSimilar attack · The Hacker News
• MediumCVE-2026-118046: JS Help Desk plugin stored DOM-based cross-site scripting via jsticket_messageSimilar attack · NVD/CVE Database
• MediumARTEX abuse expands as cybercriminals target financial sectorSimilar attack · Microsoft Security Blog
• CriticalCVE-2026-58490: Tracecat SAML authentication bypass through unsigned responses in Docker ComposeSimilar attack · NVD/CVE Database
• MediumCVE-2026-124028: mistral.rs delimiter injection allows attacker-chosen tool calls via quoted textSimilar attack · NVD/CVE Database