Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-7220

A vulnerability has been found in jackwrichards FastlyMCP up to 6f3d0b0e654fc51076badc7fa16c03c461f95620. This impacts an unknown function of the file fastly-mcp.mjs of the component fastly_cli Tool. The manipulation of the argument command leads to os command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:8ae3db222af34c31eca34014566e77a58d11643e644ea3de0f934dea712a4a60
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
2

Preserved source conflicts

No provider value was silently selected as the winner.

cvss · 4 assertions

{"metric":{"baseScore":6.9,"baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P","version":"4.0"},"metric_type":"cvssV4_0"}

  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:01a5aa32f0b08f905d6dd02bc6989ce703cac57653c09100bf3af33d62e26de6 · sha256:b96ec0b3b2068201… · /containers/cna/metrics/0/cvssV4_0

{"metric":{"baseScore":7.5,"vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR","version":"2.0"},"metric_type":"cvssV2_0"}

  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:01a5aa32f0b08f905d6dd02bc6989ce703cac57653c09100bf3af33d62e26de6 · sha256:b96ec0b3b2068201… · /containers/cna/metrics/3/cvssV2_0

{"metric":{"baseScore":7.3,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R","version":"3.1"},"metric_type":"cvssV3_1"}

  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:01a5aa32f0b08f905d6dd02bc6989ce703cac57653c09100bf3af33d62e26de6 · sha256:b96ec0b3b2068201… · /containers/cna/metrics/1/cvssV3_1

{"metric":{"baseScore":7.3,"baseSeverity":"HIGH","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R","version":"3.0"},"metric_type":"cvssV3_0"}

  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:01a5aa32f0b08f905d6dd02bc6989ce703cac57653c09100bf3af33d62e26de6 · sha256:b96ec0b3b2068201… · /containers/cna/metrics/2/cvssV3_0
cwe · 2 assertions

{"cweId":"CWE-78","description":"OS Command Injection","lang":"en","type":"CWE"}

  • cve_program_cvelist_v5cwe
    urn:baitaphish:normalized-source-record:v2:01a5aa32f0b08f905d6dd02bc6989ce703cac57653c09100bf3af33d62e26de6 · sha256:b96ec0b3b2068201… · /containers/cna/problemTypes/0/descriptions/0

{"cweId":"CWE-77","description":"Command Injection","lang":"en","type":"CWE"}

  • cve_program_cvelist_v5cwe
    urn:baitaphish:normalized-source-record:v2:01a5aa32f0b08f905d6dd02bc6989ce703cac57653c09100bf3af33d62e26de6 · sha256:b96ec0b3b2068201… · /containers/cna/problemTypes/1/descriptions/0

Affected products and versions

1 source assertion
{"modules":["fastly_cli Tool"],"product":"FastlyMCP","vendor":"jackwrichards","versions":[{"status":"affected","version":"6f3d0b0e654fc51076badc7fa16c03c461f95620"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:01a5aa32f0b08f905d6dd02bc6989ce703cac57653c09100bf3af33d62e26de6 · sha256:b96ec0b3b2068201… · /containers/cna/affected/0

Provider-owned CVSS observations

4 source assertions
{"metric":{"baseScore":6.9,"baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P","version":"4.0"},"metric_type":"cvssV4_0"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:01a5aa32f0b08f905d6dd02bc6989ce703cac57653c09100bf3af33d62e26de6 · sha256:b96ec0b3b2068201… · /containers/cna/metrics/0/cvssV4_0
{"metric":{"baseScore":7.5,"vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR","version":"2.0"},"metric_type":"cvssV2_0"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:01a5aa32f0b08f905d6dd02bc6989ce703cac57653c09100bf3af33d62e26de6 · sha256:b96ec0b3b2068201… · /containers/cna/metrics/3/cvssV2_0
{"metric":{"baseScore":7.3,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R","version":"3.1"},"metric_type":"cvssV3_1"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:01a5aa32f0b08f905d6dd02bc6989ce703cac57653c09100bf3af33d62e26de6 · sha256:b96ec0b3b2068201… · /containers/cna/metrics/1/cvssV3_1
{"metric":{"baseScore":7.3,"baseSeverity":"HIGH","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R","version":"3.0"},"metric_type":"cvssV3_0"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:01a5aa32f0b08f905d6dd02bc6989ce703cac57653c09100bf3af33d62e26de6 · sha256:b96ec0b3b2068201… · /containers/cna/metrics/2/cvssV3_0

CWE assertions

2 source assertions
{"cweId":"CWE-78","description":"OS Command Injection","lang":"en","type":"CWE"}
  • cve_program_cvelist_v5cwe
    urn:baitaphish:normalized-source-record:v2:01a5aa32f0b08f905d6dd02bc6989ce703cac57653c09100bf3af33d62e26de6 · sha256:b96ec0b3b2068201… · /containers/cna/problemTypes/0/descriptions/0
{"cweId":"CWE-77","description":"Command Injection","lang":"en","type":"CWE"}
  • cve_program_cvelist_v5cwe
    urn:baitaphish:normalized-source-record:v2:01a5aa32f0b08f905d6dd02bc6989ce703cac57653c09100bf3af33d62e26de6 · sha256:b96ec0b3b2068201… · /containers/cna/problemTypes/1/descriptions/0

Source references

5 source assertions
{"tags":["product"],"url":"https://github.com/jackwrichards/FastlyMCP/"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:01a5aa32f0b08f905d6dd02bc6989ce703cac57653c09100bf3af33d62e26de6 · sha256:b96ec0b3b2068201… · /containers/cna/references/4
{"tags":["exploit","issue-tracking"],"url":"https://github.com/jackwrichards/FastlyMCP/issues/3"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:01a5aa32f0b08f905d6dd02bc6989ce703cac57653c09100bf3af33d62e26de6 · sha256:b96ec0b3b2068201… · /containers/cna/references/3
{"name":"Submit #802138 | jackwrichards fastly-mcp-server 6f3d0b0e654fc51076badc7fa16c03c461f95620 Command Injection","tags":["third-party-advisory"],"url":"https://vuldb.com/submit/802138"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:01a5aa32f0b08f905d6dd02bc6989ce703cac57653c09100bf3af33d62e26de6 · sha256:b96ec0b3b2068201… · /containers/cna/references/2
{"name":"VDB-359820 | jackwrichards FastlyMCP fastly_cli Tool fastly-mcp.mjs os command injection","tags":["vdb-entry","technical-description"],"url":"https://vuldb.com/vuln/359820"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:01a5aa32f0b08f905d6dd02bc6989ce703cac57653c09100bf3af33d62e26de6 · sha256:b96ec0b3b2068201… · /containers/cna/references/0
{"name":"VDB-359820 | CTI Indicators (IOB, IOC, TTP, IOA)","tags":["signature","permissions-required"],"url":"https://vuldb.com/vuln/359820/cti"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:01a5aa32f0b08f905d6dd02bc6989ce703cac57653c09100bf3af33d62e26de6 · sha256:b96ec0b3b2068201… · /containers/cna/references/1

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer