CVE-2026-2975
Information Disclosure in FastApiAdmin Custom Documentation Endpoint
Publication date: 2026-02-23
Last updated on: 2026-03-05
Assigner: VulDB
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| fastapiadmin | fastapiadmin | to 2.2.0 (inc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-284 | The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor. |
| CWE-200 | The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
CVE-2026-2975 is a security flaw in FastApiAdmin versions up to 2.2.0, specifically in the function reset_api_docs within the file /backend/app/plugin/init_app.py of the Custom Documentation Endpoint component.
This vulnerability causes information disclosure by exposing API documentation endpoints such as the OpenAPI specification and documentation pages without any authentication or authorization controls.
As a result, unauthorized remote attackers can access sensitive metadata about the API, including endpoints, parameters, and data models, compromising confidentiality.
The exploit is publicly available, making it easier for attackers to leverage this flaw.
How can this vulnerability impact me? :
This vulnerability can lead to unauthorized disclosure of sensitive information about the API, such as detailed metadata including endpoints, parameters, and data models.
Attackers can remotely exploit this flaw without any authentication, increasing the risk of targeted attacks or further exploitation.
While it does not directly affect the integrity or availability of the system, the confidentiality breach can facilitate other attacks or expose sensitive implementation details.
How does this vulnerability affect compliance with common standards and regulations (like GDPR, HIPAA)?:
I don't know
How can this vulnerability be detected on my network or system? Can you suggest some commands?
This vulnerability can be detected by checking if the FastApiAdmin instance exposes the API documentation endpoints such as /api/v1/docs, /api/v1/redoc, or the OpenAPI specification openapi.json without any authentication or authorization.
You can use network scanning or HTTP request commands to test access to these endpoints remotely.
- Use curl to check if the documentation endpoints are accessible without authentication, for example: curl -i http://<target-host>/api/v1/docs
- Similarly, test the OpenAPI JSON endpoint: curl -i http://<target-host>/openapi.json
- If these endpoints return detailed API metadata without requiring credentials, the vulnerability is present.
What immediate steps should I take to mitigate this vulnerability?
Immediate mitigation steps include restricting or disabling API documentation endpoints in production environments.
Enforce authentication and authorization controls for accessing the documentation and OpenAPI routes to prevent unauthorized access.
Alternatively, limit access to these endpoints to trusted internal networks only.
If possible, consider replacing the affected FastApiAdmin version with an alternative or updated version that addresses this vulnerability.