CVE-2026-2975 - Vulnerability Analysis

Overview

FastApiAdmin <= 2.2.0 contains an information disclosure vulnerability caused by manipulation of the reset_api_docs function in /backend/app/plugin/init_app.py Custom Documentation Endpoint, letting remote attackers access sensitive information, exploit requires no special privileges.

Severity & Score

Impact

Remote attackers can disclose sensitive information via the reset_api_docs function.

Mitigation

Update to the latest version beyond 2.2.0.

References

• https://github.com/CC-T-454455/Vulnerabilities/tree/master/fastapi-admin/vulnerability-1
• https://vuldb.com/?ctiid.347359
• https://vuldb.com/?id.347359
• https://vuldb.com/?submit.756067

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner