CVE-2026-2975: FastApiAdmin Custom Documentation Endpoint init_app.py reset_api_docs information disclosure
A security flaw has been discovered in FastApiAdmin up to 2.2.0. Affected by this vulnerability is the function resetapidocs of the file /backend/app/plugin/initapp.py of the component Custom Documentation Endpoint. The manipulation results in information disclosure. The attack may be performed from remote. The exploit has been released to the public and may be used for attacks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-2975?
CVE-2026-2975 has been classified as a moderate severity vulnerability due to the information disclosure risk.
What software versions are affected by CVE-2026-2975?
CVE-2026-2975 affects FastApiAdmin versions up to and including 2.2.0.
How do I fix CVE-2026-2975?
To fix CVE-2026-2975, upgrade FastApiAdmin to a version that is beyond 2.2.0.
What component is vulnerable in CVE-2026-2975?
The vulnerable component in CVE-2026-2975 is the reset_api_docs function within the init_app.py file.
What type of vulnerability is CVE-2026-2975?
CVE-2026-2975 is an information disclosure vulnerability that can expose sensitive data.