Skip to content
OpenAdvisories

Vendor

labring

37 known vulnerabilities.

Products

FastGPT 33 sealos 2 laf 2
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Critical 9.3
    CVE-2026-68929

    FastGPT: Unauthenticated WeChat channel hijack and denial of service via shareId-only authorization

    FastGPT is an open-source LLM platform for building AI applications on a knowledge base. In versions prior to 4.15.2, the WeChat (iLink) share-channel endpoints authorize requests using only the public shareId, with no authenticated identity or team-ownership…

    labring FastGPT
  • Critical 9.3
    CVE-2026-50562

    FastGPT: Untrusted PR artifacts are pushed and deployed by privileged preview workflows

    FastGPT is a knowledge-based AI application platform. At commit 22ebfacbb43311e9b73294040ae0eb87390c6bba and earlier, artifacts built from untrusted pull request code in .github/workflows/preview-docs-build.yml and .github/workflows/preview-fastgpt-build.yml …

    labring FastGPT
  • Critical 9.8
    CVE-2026-42302

    FastGPT: Unauthenticated Remote Code Execution (RCE) via code-server Misconfiguration in agent-sandbox

    FastGPT is an AI Agent building platform. From version 4.14.10 to before version 4.14.13, the agent-sandbox component of FastGPT is vulnerable to unauthenticated Remote Code Execution (RCE). The startup script entrypoint.sh initializes code-server with the --…

    labring FastGPT
  • Critical 9.8
    CVE-2026-40351

    FastGPT: NoSQL Injection in loginByPassword leads to Authentication Bypass

    FastGPT is an AI Agent building platform. In versions prior to 4.14.9.5, the password-based login endpoint uses TypeScript type assertion without runtime validation, allowing an unauthenticated attacker to pass a MongoDB query operator object (e.g., {"$ne": "…

    labring FastGPT
  • Critical 10.0
    CVE-2026-34162

    FastGPT: Unauthenticated SSRF via httpTools Endpoint Leads to Internal API Key Theft

    FastGPT is an AI Agent building platform. Prior to version 4.14.9.5, the FastGPT HTTP tools testing endpoint (/api/core/app/httpTools/runTool) is exposed without any authentication. This endpoint acts as a full HTTP proxy — it accepts a user-supplied baseUrl,…

    labring FastGPT
  • Critical 9.4
    CVE-2026-33075 Public exploit

    FastGPT has Arbitrary Code Execution in GitHub Actions via pull_request_target in fastgpt-preview-image.yml

    FastGPT is an AI Agent building platform. In versions 4.14.8.3 and below, the fastgpt-preview-image.yml workflow is vulnerable to arbitrary code execution and secret exfiltration by any external contributor. It uses pull_request_target (which runs with access…

    labring FastGPT
  • Critical 9.7
    CVE-2023-50253

    laf logs leak

    Laf is a cloud development platform. In the Laf version design, the log uses communication with k8s to quickly retrieve logs from the container without the need for additional storage. However, in version 1.0.0-beta.13 and prior, this interface does not verif…

    labring laf
  • Critical 10.0
    CVE-2023-33190

    Improperly configured permissions in Sealos

    Sealos is an open source cloud operating system distribution based on the Kubernetes kernel. In versions of Sealos prior to 4.2.1-rc4 an improper configuration of role based access control (RBAC) permissions resulted in an attacker being able to obtain cluste…

    labring sealos github.com/labring/sealos Go