A vulnerability has been found in jackwrichards FastlyMCP up to 6f3d0b0e654fc51076badc7fa16c03c461f95620. This impacts an unknown function of the file fastly-mc…

CVE-2026-7220 affects jackwrichards FastlyMCP up to commit 6f3d0b0e654fc51076badc7fa16c03c461f95620. The vulnerability exists in the fastly-mcp.mjs file of the fastly_cli Tool component. An attacker can manipulate the command argument to achieve OS command injection. The attack can be initiated remotely and the exploit has been publicly disclosed. The project uses rolling releases making version tracking difficult. The maintainer has been notified through an issue report but has not responded yet.