Jlowin vulnerabilities
We track 2 vulnerabilities in Jlowin products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on April 3, 2026.
2vulnerabilities
0critical
2high
0exploited
7.8average CVSS score
Latest Jlowin vulnerabilities
- 7.8 High severity
fastmcp: Improper Neutralization of Special Elements used in an OS Command
FastMCP is the standard framework for building MCP applications. Prior to version 3.2.0, server names containing shell metacharacters (e.g., &) can cause command injection on Windows when passed to fastmcp install claude-code or fastmcp install gemini-cli. The
- 7.8 High severity
fastmcp: Improper Neutralization of Special Elements used in an OS Command
FastMCP is the standard framework for building MCP applications. Versions prior to 2.13.0, a command-injection vulnerability lets any attacker who can influence the server_name field of an MCP execute arbitrary OS commands on Windows hosts that run fastmcp ins