CVE-2025-62800 | jlowin fastmcp up to 2.12.x oauth_callback.py cross site scripting

October 28, 2025 Yanac

A vulnerability was found in jlowin fastmcp up to 2.12.x and classified as problematic. The impacted element is an unknown function of the file oauth_callback.py. The manipulation results in cross site scripting.

This vulnerability was named CVE-2025-62800. The attack may be performed from remote. There is no available exploit.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More