Skip to content
OpenAdvisories

Vendor

labring

37 known vulnerabilities.

Products

FastGPT 33 sealos 2 laf 2
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.4
    CVE-2026-33075 Public exploit

    FastGPT has Arbitrary Code Execution in GitHub Actions via pull_request_target in fastgpt-preview-image.yml

    FastGPT is an AI Agent building platform. In versions 4.14.8.3 and below, the fastgpt-preview-image.yml workflow is vulnerable to arbitrary code execution and secret exfiltration by any external contributor. It uses pull_request_target (which runs with access…

    labring FastGPT
  • Medium 6.3
    CVE-2026-32128 Public exploit

    FastGPT Python Sandbox Bypass of File-Write Restriction

    FastGPT is an AI Agent building platform. In 4.14.7 and earlier, FastGPT's Python Sandbox (fastgpt-sandbox) includes guardrails intended to prevent file writes (static detection + seccomp). These guardrails are bypassable by remapping stdout (fd 1) to an arbi…

    labring FastGPT
  • Medium 6.3
    CVE-2025-49131 Public exploit

    FastGPT Sandbox Vulnerable to Sandbox Bypass

    FastGPT is an open-source project that provides a platform for building, deploying, and operating AI-driven workflows and conversational agents. The Sandbox container (fastgpt-sandbox) is a specialized, isolated environment used by FastGPT to safely execute u…

    labring FastGPT