CVE-2026-102610

Name of the Vulnerable Software and Affected Versions fast-agent versions prior to 0.7.21

Description The serve command uses HTTP transport bound to 0.0.0.0 on port 8000 without authentication. This allows any network client capable of reaching the /mcp endpoint to invoke the exposed agent tool. If the server is started with the --shell flag, the agent can utilize the local execute tool implemented by tools/local shell executor.py, enabling an unauthenticated remote client to execute operating-system commands with the privileges of the server user. In the absence of the --shell flag, clients can still utilize the operator's model and configured Model Context Protocol (MCP) tools. The defaults are established in cli/commands/serve.py and mcp/server/agent server.py, and the non-interactive server permission prompt does not block this access.

Recommendations Update to version 0.7.21.