Is CVE-2025-64340 actively exploited?

No active exploitation of CVE-2025-64340 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2025-64340 be exploited remotely?

No. CVE-2025-64340 requires local access to exploit.

What is the CVSS score of CVE-2025-64340?

CVE-2025-64340 has a CVSS score of 6.7 (MEDIUM).

HOME VULNERABILITIESCVE-2025-64340

MEDIUM

CVE-2025-64340

CWE-78Published: April 3, 2026· Updated: Apr 7, 2026

6.7

CVSS v3.1

EPSS:0.03%probability of exploitation in 30 daysPercentile:8.0th

Official Description

FastMCP is the standard framework for building MCP applications. Prior to version 3.2.0, server names containing shell metacharacters (e.g., &) can cause command injection on Windows when passed to fastmcp install claude-code or fastmcp install gemini-cli. These install paths use subprocess.run() with a list argument, but on Windows the target CLIs often resolve to .cmd wrappers that are executed through cmd.exe, which interprets metacharacters in the flattened command string. This issue has been patched in version 3.2.0.

NVD Source

Technical Analysis

CVE-2025-64340 requires local access, meaning attackers must already have a foothold on the target system.

Exploitation requires low privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

A successful exploit results in complete confidentiality breach (data exposure), full integrity compromise (data manipulation), availability disruption (denial of service), with a CVSS base score of 6.7.