{"id":8879,"date":"2026-11-13T14:25:13","date_gmt":"2026-11-13T14:25:13","guid":{"rendered":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-102610-fast-agent-unauthenticated-rce"},"modified":"2026-11-13T14:25:13","modified_gmt":"2026-11-13T14:25:13","slug":"cve-2026-102610-fast-agent-unauthenticated-rce","status":"publish","type":"post","link":"https:\/\/i10x.ai\/news\/cve-2026-102610-fast-agent-unauthenticated-rce","title":{"rendered":"CVE-2026-102610: fast-agent serve exposes unauthenticated remote command execution"},"content":{"rendered":"\n<h2 class=\"wp-block-heading\">\u26a1 Quick Take<\/h2>\n\n\n\n<ul class=\"wp-block-list\"><li><strong>What:<\/strong> CVE-2026-102610 in fast-agent before 0.7.21 exposed an unauthenticated MCP server on 0.0.0.0:8000 by default, enabling remote command execution when the &#8211;shell flag was used.<\/li><li><strong>Who is affected:<\/strong> Developers running <code>fast-agent serve<\/code> with the &#8211;shell (or -x) flag on non-isolated hosts prior to version 0.7.21.<\/li><li><strong>What to do:<\/strong> Upgrade to fast-agent 0.7.21 or later immediately if you run <code>fast-agent serve<\/code> on any network-accessible host.<\/li><li><strong>Severity:<\/strong> CVSS 6.4 (Medium), but enables unauthenticated remote command execution as the server user when &#8211;shell is enabled.<\/li><li><strong>Fixed in:<\/strong> Version 0.7.21, released June 19, 2026.<\/li><\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">In plain English<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">fast-agent is a developer tool for building AI agents that support the Model Context Protocol. Before version 0.7.21, when you started the agent server with the <code>fast-agent serve<\/code> command, it would listen on all network interfaces (not just your own computer) and accept connections from anyone without checking passwords or credentials. If you also used the &#8211;shell flag (which the official quickstart guide recommended), any attacker who could reach your computer over the network could send commands to the AI agent and make it run any operating system command they wanted, with the same permissions as your user account. Version 0.7.21 fixes this by only listening on your local computer by default and showing a warning if you explicitly choose to expose it to the network. If you use fast-agent as a developer tool, upgrade to 0.7.21 immediately. If you don&#8217;t use this tool, you can ignore this issue.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What happened<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">fast-agent is an open-source framework for building, running, and evaluating AI agents with Model Context Protocol (MCP) support. Prior to version 0.7.21, the <code>fast-agent serve<\/code> command exposed the agent over MCP using HTTP transport bound to 0.0.0.0 (all network interfaces) on port 8000 with no authentication by default.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Any network client that could reach the \/mcp endpoint could invoke the exposed agent tool. When the server was started with the &#8211;shell flag (or -x, the shorthand used in the README quickstart), the agent gained access to a local execute tool implemented by tools\/local_shell_executor.py. This allowed an unauthenticated remote client to cause arbitrary operating-system commands to run as the server user.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Even without the &#8211;shell flag, an unauthenticated client could still consume the operator&#8217;s configured language model and any configured MCP tools. The defaults were defined in cli\/commands\/serve.py and mcp\/server\/agent_server.py, and the non-interactive server permission prompt did not prevent the described access.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The vulnerability was discovered by security researcher novice-22, who provided a proof of concept demonstrating both real-world exploitation using gpt-4o-mini and deterministic exploitation using a passthrough model. In the demonstration, an unauthenticated client with no Authorization header successfully completed initialize and tools\/list operations, then invoked the shell tool to execute commands and retrieve sensitive system information, all returned to the unauthenticated caller.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What you should do<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Upgrade to fast-agent version 0.7.21 or later immediately. The fixed version defaults the bind host to 127.0.0.1 (localhost only) and requires an explicit &#8211;host 0.0.0.0 opt-in for non-loopback interfaces. The update also prints a warning when binding a non-loopback interface without authentication.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If you cannot upgrade immediately, ensure that fast-agent serve is only accessible from localhost by using firewall rules or network isolation, and avoid using the &#8211;shell flag on any network-accessible deployment.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What it means<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">This vulnerability represents a critical misconfiguration in the default security posture of a developer tool. The combination of binding to all interfaces, lacking authentication, and providing shell access created a pathway for unauthenticated remote command execution. While the CVSS score of 6.4 reflects the requirement for the &#8211;shell flag and other preconditions, the practical impact for affected deployments was severe: complete system compromise as the server user.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The fix in version 0.7.21 follows security best practices by defaulting to the most restrictive configuration (localhost-only binding) and requiring explicit opt-in for more permissive settings, with clear warnings about the security implications.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Sources<\/h2>\n\n\n\n<ul class=\"wp-block-list\"><li><a href=\"https:\/\/github.com\/evalstate\/fast-agent\/security\/advisories\/GHSA-9vhv-g5hf-m7m7\" target=\"_blank\" rel=\"noreferrer noopener\">GitHub Security Advisory GHSA-9vhv-g5hf-m7m7<\/a><\/li><li><a href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2026-102610\" target=\"_blank\" rel=\"noreferrer noopener\">NVD CVE-2026-102610<\/a><\/li><li><a href=\"https:\/\/github.com\/evalstate\/fast-agent\/releases\/tag\/v0.7.21\" target=\"_blank\" rel=\"noreferrer noopener\">fast-agent release 0.7.21<\/a><\/li><li><a href=\"https:\/\/github.com\/evalstate\/fast-agent\/pull\/828\" target=\"_blank\" rel=\"noreferrer noopener\">Pull request #828<\/a><\/li><li><a href=\"https:\/\/github.com\/evalstate\/fast-agent\/commit\/ba99f89c3ec7f1ef1c8b1ebce381c12b60dfea29\" target=\"_blank\" rel=\"noreferrer noopener\">Commit ba99f89<\/a><\/li><\/ul>\n","protected":false},"excerpt":{"rendered":"<p>The fast-agent framework shipped with a default configuration that bound its MCP server to all network interfaces without authentication, allowing remote attackers to execute arbitrary commands when the &#8211;shell flag was used.<\/p>\n","protected":false},"author":2,"featured_media":8878,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"paper_title":"","paper_url":"","pdf_url":"","doi":"","arxiv_id":"","authors":"","institutions":"","paper_date":"","venue":"","peer_reviewed":false,"code_url":"","data_url":"","funding_coi":"","figure_license":"","paper_license":"","replication":"","study_models":"","study_sample":"","footnotes":"","_yoast_wpseo_primary_category":"65","_nx_sec_severity":"medium","_nx_sec_affected":"fast-agent before 0.7.21","_nx_sec_status":"patch-available","_nx_sec_kicker":"ALERT: Unauthenticated RCE in fast-agent MCP server","_nx_sec_type":"mcp","_nx_sec_vendor":"evalstate","_nx_sec_fixed":"0.7.21","_nx_sec_action":""},"categories":[14,65,12,28],"tags":[],"companies":[],"products":[],"class_list":["post-8879","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-agents","category-ai-security","category-policy-safety","category-security-defense"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.7 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>CVE-2026-102610: fast-agent RCE flaw patched<\/title>\n<meta name=\"description\" content=\"CVE-2026-102610 in fast-agent before 0.7.21 allowed unauthenticated remote command execution via the serve command with --shell flag on 0.0.0.0.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/i10xnews.kinsta.cloud\/cve-2026-102610-fast-agent-unauthenticated-rce\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"CVE-2026-102610: fast-agent RCE flaw patched\" \/>\n<meta property=\"og:description\" content=\"CVE-2026-102610 in fast-agent before 0.7.21 allowed unauthenticated remote command execution via the serve command with --shell flag on 0.0.0.0.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/i10xnews.kinsta.cloud\/cve-2026-102610-fast-agent-unauthenticated-rce\" \/>\n<meta property=\"og:site_name\" content=\"i10X News\" \/>\n<meta property=\"article:published_time\" content=\"2026-11-13T14:25:13+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/i10xnews.kinsta.cloud\/wp-content\/uploads\/2026\/11\/cve-2026-102610-fast-agent-unauthenticated-rce-title.webp\" \/>\n\t<meta property=\"og:image:width\" content=\"1344\" \/>\n\t<meta property=\"og:image:height\" content=\"768\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/webp\" \/>\n<meta name=\"author\" content=\"Christopher Ort\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:image\" content=\"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/i10x-news-og-default-1200x630-1.png\" \/>\n<meta name=\"twitter:creator\" content=\"@i10x_ai\" \/>\n<meta name=\"twitter:site\" content=\"@i10x_ai\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Christopher Ort\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"NewsArticle\",\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-102610-fast-agent-unauthenticated-rce#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-102610-fast-agent-unauthenticated-rce\"},\"author\":{\"name\":\"Christopher Ort\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#\\\/schema\\\/person\\\/d410bb7ee72febefca2c9c369939219a\"},\"headline\":\"CVE-2026-102610: fast-agent serve exposes unauthenticated remote command execution\",\"datePublished\":\"2026-11-13T14:25:13+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-102610-fast-agent-unauthenticated-rce\"},\"wordCount\":655,\"publisher\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-102610-fast-agent-unauthenticated-rce#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/cve-2026-102610-fast-agent-unauthenticated-rce-title.webp\",\"articleSection\":[\"Agents\",\"AI Security\",\"Policy &amp; Safety\",\"Security &amp; Defense\"],\"inLanguage\":\"en-US\",\"dateModified\":\"2026-11-13T14:25:13+00:00\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-102610-fast-agent-unauthenticated-rce\",\"url\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-102610-fast-agent-unauthenticated-rce\",\"name\":\"CVE-2026-102610: fast-agent RCE flaw patched\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-102610-fast-agent-unauthenticated-rce#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-102610-fast-agent-unauthenticated-rce#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/cve-2026-102610-fast-agent-unauthenticated-rce-title.webp\",\"datePublished\":\"2026-11-13T14:25:13+00:00\",\"description\":\"CVE-2026-102610 in fast-agent before 0.7.21 allowed unauthenticated remote command execution via the serve command with --shell flag on 0.0.0.0.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-102610-fast-agent-unauthenticated-rce#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-102610-fast-agent-unauthenticated-rce\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-102610-fast-agent-unauthenticated-rce#primaryimage\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/cve-2026-102610-fast-agent-unauthenticated-rce-title.webp\",\"contentUrl\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/cve-2026-102610-fast-agent-unauthenticated-rce-title.webp\",\"width\":1344,\"height\":768,\"caption\":\"Image: AI-generated, i10X\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-102610-fast-agent-unauthenticated-rce#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/i10x.ai\\\/news\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"CVE-2026-102610: fast-agent serve exposes unauthenticated remote command execution\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#website\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\",\"name\":\"i10X News\",\"description\":\"Stay updated with the latest news and announcements from i10X.\",\"publisher\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/i10x.ai\\\/news?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#organization\",\"name\":\"i10X\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/i10x-logo-180.png\",\"contentUrl\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/i10x-logo-180.png\",\"width\":180,\"height\":180,\"caption\":\"i10X\"},\"image\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/i10x_ai\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/i10x-ai\",\"https:\\\/\\\/instagram.com\\\/i10x.ai\",\"https:\\\/\\\/www.youtube.com\\\/@i10X_ai_official\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#\\\/schema\\\/person\\\/d410bb7ee72febefca2c9c369939219a\",\"name\":\"Christopher Ort\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/christopher-ort-192.webp\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/christopher-ort-192.webp\",\"contentUrl\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/christopher-ort-192.webp\",\"caption\":\"Christopher Ort\"},\"description\":\"Christopher Ort handles SEO, AI agent workflows and PR & partnerships at i10x.ai, the all-in-one AI workspace built by i10X Global Pte. Ltd. in Singapore. He is a graduate of Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU). He is the author of \u201cThe Style Penalty\u201d, a study published on SSRN that analyses 1,576 evaluation decisions by four frontier AI models to show how AI-written CVs fare in automated hiring screens; the research has been covered by heise online and t3n.\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\\\/author\\\/christopher-ort\",\"sameAs\":[\"https:\\\/\\\/i10x.ai\\\/blog\\\/author\\\/christopher-ort\"],\"worksFor\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#organization\"},\"alumniOf\":{\"@type\":\"EducationalOrganization\",\"name\":\"Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU)\",\"url\":\"https:\\\/\\\/www.fau.eu\"},\"subjectOf\":[{\"@type\":\"CreativeWork\",\"url\":\"https:\\\/\\\/papers.ssrn.com\\\/abstract=7426699\",\"name\":\"The Style Penalty: How AI Resume-Writing Tools Shape Outcomes in Automated Hiring Screens\"},{\"@type\":\"CreativeWork\",\"url\":\"https:\\\/\\\/www.heise.de\\\/news\\\/KI-Chatbots-bewerten-KI-Lebenslaeufe-Claude-findet-sich-besser-als-GPT-11317531.html\",\"name\":\"KI-Chatbots bewerten KI-Lebensl\u00e4ufe: Claude findet sich besser als GPT\"},{\"@type\":\"CreativeWork\",\"url\":\"https:\\\/\\\/t3n.de\\\/news\\\/bewerbung-schreiben-ki-5-fehler-1747190\\\/\",\"name\":\"Bewerbung mit KI schreiben: Diese 5 Fehler solltet ihr laut Studien vermeiden\"}]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"CVE-2026-102610: fast-agent RCE flaw patched","description":"CVE-2026-102610 in fast-agent before 0.7.21 allowed unauthenticated remote command execution via the serve command with --shell flag on 0.0.0.0.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-102610-fast-agent-unauthenticated-rce","og_locale":"en_US","og_type":"article","og_title":"CVE-2026-102610: fast-agent RCE flaw patched","og_description":"CVE-2026-102610 in fast-agent before 0.7.21 allowed unauthenticated remote command execution via the serve command with --shell flag on 0.0.0.0.","og_url":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-102610-fast-agent-unauthenticated-rce","og_site_name":"i10X News","article_published_time":"2026-11-13T14:25:13+00:00","og_image":[{"width":1344,"height":768,"url":"https:\/\/i10xnews.kinsta.cloud\/wp-content\/uploads\/2026\/11\/cve-2026-102610-fast-agent-unauthenticated-rce-title.webp","type":"image\/webp"}],"author":"Christopher Ort","twitter_card":"summary_large_image","twitter_image":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/i10x-news-og-default-1200x630-1.png","twitter_creator":"@i10x_ai","twitter_site":"@i10x_ai","twitter_misc":{"Written by":"Christopher Ort","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"NewsArticle","@id":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-102610-fast-agent-unauthenticated-rce#article","isPartOf":{"@id":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-102610-fast-agent-unauthenticated-rce"},"author":{"name":"Christopher Ort","@id":"https:\/\/i10x.ai\/news\/#\/schema\/person\/d410bb7ee72febefca2c9c369939219a"},"headline":"CVE-2026-102610: fast-agent serve exposes unauthenticated remote command execution","datePublished":"2026-11-13T14:25:13+00:00","mainEntityOfPage":{"@id":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-102610-fast-agent-unauthenticated-rce"},"wordCount":655,"publisher":{"@id":"https:\/\/i10x.ai\/news\/#organization"},"image":{"@id":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-102610-fast-agent-unauthenticated-rce#primaryimage"},"thumbnailUrl":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/11\/cve-2026-102610-fast-agent-unauthenticated-rce-title.webp","articleSection":["Agents","AI Security","Policy &amp; Safety","Security &amp; Defense"],"inLanguage":"en-US","dateModified":"2026-11-13T14:25:13+00:00"},{"@type":"WebPage","@id":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-102610-fast-agent-unauthenticated-rce","url":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-102610-fast-agent-unauthenticated-rce","name":"CVE-2026-102610: fast-agent RCE flaw patched","isPartOf":{"@id":"https:\/\/i10x.ai\/news\/#website"},"primaryImageOfPage":{"@id":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-102610-fast-agent-unauthenticated-rce#primaryimage"},"image":{"@id":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-102610-fast-agent-unauthenticated-rce#primaryimage"},"thumbnailUrl":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/11\/cve-2026-102610-fast-agent-unauthenticated-rce-title.webp","datePublished":"2026-11-13T14:25:13+00:00","description":"CVE-2026-102610 in fast-agent before 0.7.21 allowed unauthenticated remote command execution via the serve command with --shell flag on 0.0.0.0.","breadcrumb":{"@id":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-102610-fast-agent-unauthenticated-rce#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/i10xnews.kinsta.cloud\/cve-2026-102610-fast-agent-unauthenticated-rce"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-102610-fast-agent-unauthenticated-rce#primaryimage","url":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/11\/cve-2026-102610-fast-agent-unauthenticated-rce-title.webp","contentUrl":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/11\/cve-2026-102610-fast-agent-unauthenticated-rce-title.webp","width":1344,"height":768,"caption":"Image: AI-generated, i10X"},{"@type":"BreadcrumbList","@id":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-102610-fast-agent-unauthenticated-rce#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/i10x.ai\/news"},{"@type":"ListItem","position":2,"name":"CVE-2026-102610: fast-agent serve exposes unauthenticated remote command execution"}]},{"@type":"WebSite","@id":"https:\/\/i10x.ai\/news\/#website","url":"https:\/\/i10x.ai\/news","name":"i10X News","description":"Stay updated with the latest news and announcements from i10X.","publisher":{"@id":"https:\/\/i10x.ai\/news\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/i10x.ai\/news?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/i10x.ai\/news\/#organization","name":"i10X","url":"https:\/\/i10x.ai\/news\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/i10x.ai\/news\/#\/schema\/logo\/image\/","url":"https:\/\/i10xnews.kinsta.cloud\/wp-content\/uploads\/2026\/10\/i10x-logo-180.png","contentUrl":"https:\/\/i10xnews.kinsta.cloud\/wp-content\/uploads\/2026\/10\/i10x-logo-180.png","width":180,"height":180,"caption":"i10X"},"image":{"@id":"https:\/\/i10x.ai\/news\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/i10x_ai","https:\/\/www.linkedin.com\/company\/i10x-ai","https:\/\/instagram.com\/i10x.ai","https:\/\/www.youtube.com\/@i10X_ai_official"]},{"@type":"Person","@id":"https:\/\/i10x.ai\/news\/#\/schema\/person\/d410bb7ee72febefca2c9c369939219a","name":"Christopher Ort","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/christopher-ort-192.webp","url":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/christopher-ort-192.webp","contentUrl":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/christopher-ort-192.webp","caption":"Christopher Ort"},"description":"Christopher Ort handles SEO, AI agent workflows and PR & partnerships at i10x.ai, the all-in-one AI workspace built by i10X Global Pte. Ltd. in Singapore. He is a graduate of Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU). He is the author of \u201cThe Style Penalty\u201d, a study published on SSRN that analyses 1,576 evaluation decisions by four frontier AI models to show how AI-written CVs fare in automated hiring screens; the research has been covered by heise online and t3n.","url":"https:\/\/i10x.ai\/news\/author\/christopher-ort","sameAs":["https:\/\/i10x.ai\/blog\/author\/christopher-ort"],"worksFor":{"@id":"https:\/\/i10x.ai\/news\/#organization"},"alumniOf":{"@type":"EducationalOrganization","name":"Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU)","url":"https:\/\/www.fau.eu"},"subjectOf":[{"@type":"CreativeWork","url":"https:\/\/papers.ssrn.com\/abstract=7426699","name":"The Style Penalty: How AI Resume-Writing Tools Shape Outcomes in Automated Hiring Screens"},{"@type":"CreativeWork","url":"https:\/\/www.heise.de\/news\/KI-Chatbots-bewerten-KI-Lebenslaeufe-Claude-findet-sich-besser-als-GPT-11317531.html","name":"KI-Chatbots bewerten KI-Lebensl\u00e4ufe: Claude findet sich besser als GPT"},{"@type":"CreativeWork","url":"https:\/\/t3n.de\/news\/bewerbung-schreiben-ki-5-fehler-1747190\/","name":"Bewerbung mit KI schreiben: Diese 5 Fehler solltet ihr laut Studien vermeiden"}]}]}},"_links":{"self":[{"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/posts\/8879","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/comments?post=8879"}],"version-history":[{"count":0,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/posts\/8879\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/media\/8878"}],"wp:attachment":[{"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/media?parent=8879"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/categories?post=8879"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/tags?post=8879"},{"taxonomy":"company","embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/companies?post=8879"},{"taxonomy":"product","embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/products?post=8879"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}