Threats Tagged 'brew-fastmcp-ghsa-c2jp-c369-7pvx'
View all threats tagged with 'brew-fastmcp-ghsa-c2jp-c369-7pvx'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'brew-fastmcp-ghsa-c2jp-c369-7pvx'
Click on any threat for detailed analysis and mitigation recommendations
FastMCP's authentication integration with Entra ID allows the FastMCP server to act both as an OAuth client and authorization server. Due to Entra ID's lack of Dynamic Client Registration support, FastMCP uses a static app registration for authorization. After a user consents to this static client, Entra ID sets a persistent authorization cookie. An attacker controlling their own MCP client can exploit this by initiating authorization flows that reuse the victim's consented static client, potentially leading to a confused deputy scenario and account takeover. Join the discussion | GCVE Database | 08/13/2026, 17:13:14 UTC Added: 09/18/2026, 01:05:12 UTC |
Showing 1 to 1 of 1 result