CVE-2025-69196 describes a vulnerability in FastMCP, a framework for building MCP applications used in Red Hat products. The flaw involves incorrect processing of the resource parameter during authorization and token requests, leading to security tokens being issued for an unintended base URL rather than the specific MCP server. This can result in unauthorized access or sensitive information disclosure. The vulnerability affects Red Hat Satellite and other products leveraging FastMCP. Red Hat has published a security advisory (RHSA-2026:36350) but has not yet released a patch or fix. The advisory notes the vulnerability's impact on confidentiality and integrity, with a high severity rating. The issue is related to CWE-1220 (Insufficient Granularity of Access Control) among other CWEs. The container image for the MCP server is available as a Technology Preview, indicating ongoing development and evaluation.

The vulnerability allows an attacker to potentially obtain security tokens issued for unintended base URLs, which could lead to unauthorized access to resources or disclosure of sensitive information within affected Red Hat products. The impact affects confidentiality and integrity of the system. There are no known exploits in the wild at this time. The vulnerability affects Hosted OpenShift Clusters, Red Hat OpenShift AI, and Red Hat Satellite. Red Hat Developer Hub is not affected.

Currently, no official fix or patch has been released for this vulnerability. The affected MCP server container image is available only as a Technology Preview. Red Hat recommends following the Satellite MCP integration documentation for guidance. Customers should monitor Red Hat advisories for updates and consider engaging with Red Hat Technical Account Managers for tailored advice. Since this is a Technology Preview, it is advisable to avoid deploying it in production environments until a stable, fixed release is available.