fast-mcp-telegram vulnerabilities
CVEs whose affected-version data names the fast-mcp-telegram package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-55096High· 7.1PoCfast-mcp-telegram is a Telegram MCP Server
fast-mcp-telegram is a Telegram MCP Server. Prior to version 30.1, the send_message/send_message_to_phone MCP tools accept files as a list of http(s) URLs, which the server downloads and attaches to the outgoing Telegram message. Downloa…
▾ Midnightleshchenko1979 · fast-mcp-telegramEPSS 0.25%via NVD
CVE-2026-52830Critical· 9.4fast-mcp-telegram: Bearer token path traversal bypasses reserved Telegram session protection
fast-mcp-telegram: Bearer token path traversal bypasses reserved Telegram session protection
▾ Midnightfast-mcp-telegram · fast-mcp-telegramEPSS 0.65%via GHSA