evalstate/fast-agent Security Advisories | GitStock

medium2026-11-09

CVE-2026-102610-fast-agent: `fast-agent serve` binds HTTP to 0.0.0.0 with no authentication by default; with --shell this is unauthenticated remote command execution

GHSA-9vhv-g5hf-m7m7