How severe is CVE-2025-64340?

CVE-2025-64340 has a CVSS 3.x base score of 6.7, rated medium severity. It is exploitable over local access with high attack complexity, requires low privileges and user interaction. Impact on confidentiality is high, integrity high, and availability high.

Is CVE-2025-64340 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (50th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2025-64340?

CVE-2025-64340 affects Jlowin Fastmcp. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2025-64340?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

Does CVE-2025-64340 have an EU (EUVD) identifier?

Yes. CVE-2025-64340 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2025-209207.

When was CVE-2025-64340 published?

CVE-2025-64340 was published on 2026-04-03 and last updated on 2026-06-17.

CVE-2025-64340

CVE-2025-64340 is a medium-severity vulnerability in Jlowin Fastmcp with a CVSS 3.x base score of 6.7. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-78.

Key facts

Severity: Medium (CVSS 3.x base score 6.7)
EPSS exploit prediction: 1% (50th percentile)
Actively exploited: Not listed in CISA KEV
EU (EUVD) id: EUVD-2025-209207
Weakness: CWE-78
Affected product: Jlowin Fastmcp
Published: 2026-04-03
Last modified: 2026-06-17

Description

FastMCP is the standard framework for building MCP applications. Prior to version 3.2.0, server names containing shell metacharacters (e.g., &) can cause command injection on Windows when passed to fastmcp install claude-code or fastmcp install gemini-cli. These install paths use subprocess.run() with a list argument, but on Windows the target CLIs often resolve to .cmd wrappers that are executed through cmd.exe, which interprets metacharacters in the flattened command string. This issue has been patched in version 3.2.0.

Frequently asked questions

What is CVE-2025-64340?: FastMCP is the standard framework for building MCP applications. Prior to version 3.2.0, server names containing shell metacharacters (e.g., &) can cause command injection on Windows when passed to fastmcp install claude-code or fastmcp install gemini-cli. These install paths use subprocess.run() with a list argument, but on Windows the target CLIs often resolve to .cmd wrappers that are executed through cmd.exe, which interprets metacharacters in the flattened command string. This issue has been patched in version 3.2.0.
How severe is CVE-2025-64340?: CVE-2025-64340 has a CVSS 3.x base score of 6.7, rated medium severity. It is exploitable over local access with high attack complexity, requires low privileges and user interaction. Impact on confidentiality is high, integrity high, and availability high.
Is CVE-2025-64340 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (50th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2025-64340?: CVE-2025-64340 affects Jlowin Fastmcp. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2025-64340?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
Does CVE-2025-64340 have an EU (EUVD) identifier?: Yes. CVE-2025-64340 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2025-209207.
When was CVE-2025-64340 published?: CVE-2025-64340 was published on 2026-04-03 and last updated on 2026-06-17.

References

Affected products (1)

cpe:2.3:a:jlowin:fastmcp:*:*:*:*:*:*:*:*

More vulnerabilities in Jlowin Fastmcp

CVE-2026-32871 — Critical (CVSS 10.0): FastMCP is a Pythonic way to build MCP servers and clients. Prior to version 3.2.0, the OpenAPIProvider in FastMCP…
CVE-2025-62801 — High (CVSS 7.8): FastMCP is the standard framework for building MCP applications. Versions prior to 2.13.0, a command-injection…
CVE-2025-69196 — Medium (CVSS 6.5): FastMCP is the standard framework for building MCP applications. Prior to version 2.14.2, the server does not properly…
CVE-2026-27124 — Medium (CVSS 6.1): FastMCP is the standard framework for building MCP applications. Prior to version 3.2.0, while testing the…
CVE-2025-62800 — Medium (CVSS 6.1): FastMCP is the standard framework for building MCP applications. Versions prior to 2.13.0 have a reflected cross-site…

All CVEs affecting Jlowin Fastmcp →

Other CWE-78 (OS Command Injection) vulnerabilities

CVE-2026-56004 — Critical (CVSS 10.0): A shellcode injection in the mercurial handler of the obs tar_scm source service before version 0.12.4 could be used by…
CVE-2026-56415 — Critical (CVSS 10.0): Storage Concentrator (SC & SCVM) contains a command injection vulnerability within the debug.pl script that is…
CVE-2026-56413 — Critical (CVSS 10.0): Storage Concentrator (SC & SCVM) contains a command injection vulnerability in the ms_service.pl service, which listens…
CVE-2026-49869 — Critical (CVSS 10.0): Kestra is an open-source, event-driven orchestration platform. Prior to 1.0.45 and 1.3.21, AuthenticationFilter in…
CVE-2026-49261 — Critical (CVSS 10.0): MariaDB server is a community developed fork of MySQL server. Versions 10.6.1 through 10.6.26, 10.11.1 through…
CVE-2026-10520 — Critical (CVSS 10.0): An OS Command Injection vulnerability in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a…

Browse all CWE-78 (OS Command Injection) vulnerabilities →