Skip to content
OpenAdvisories

Product · labring

FastGPT

33 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Critical 9.3
    CVE-2026-68929

    FastGPT: Unauthenticated WeChat channel hijack and denial of service via shareId-only authorization

    FastGPT is an open-source LLM platform for building AI applications on a knowledge base. In versions prior to 4.15.2, the WeChat (iLink) share-channel endpoints authorize requests using only the public shareId, with no authenticated identity or team-ownership…

    labring FastGPT
  • Critical 9.3
    CVE-2026-50562

    FastGPT: Untrusted PR artifacts are pushed and deployed by privileged preview workflows

    FastGPT is a knowledge-based AI application platform. At commit 22ebfacbb43311e9b73294040ae0eb87390c6bba and earlier, artifacts built from untrusted pull request code in .github/workflows/preview-docs-build.yml and .github/workflows/preview-fastgpt-build.yml …

    labring FastGPT
  • Critical 9.8
    CVE-2026-42302

    FastGPT: Unauthenticated Remote Code Execution (RCE) via code-server Misconfiguration in agent-sandbox

    FastGPT is an AI Agent building platform. From version 4.14.10 to before version 4.14.13, the agent-sandbox component of FastGPT is vulnerable to unauthenticated Remote Code Execution (RCE). The startup script entrypoint.sh initializes code-server with the --…

    labring FastGPT
  • Critical 9.8
    CVE-2026-40351

    FastGPT: NoSQL Injection in loginByPassword leads to Authentication Bypass

    FastGPT is an AI Agent building platform. In versions prior to 4.14.9.5, the password-based login endpoint uses TypeScript type assertion without runtime validation, allowing an unauthenticated attacker to pass a MongoDB query operator object (e.g., {"$ne": "…

    labring FastGPT
  • Critical 10.0
    CVE-2026-34162

    FastGPT: Unauthenticated SSRF via httpTools Endpoint Leads to Internal API Key Theft

    FastGPT is an AI Agent building platform. Prior to version 4.14.9.5, the FastGPT HTTP tools testing endpoint (/api/core/app/httpTools/runTool) is exposed without any authentication. This endpoint acts as a full HTTP proxy — it accepts a user-supplied baseUrl,…

    labring FastGPT
  • Critical 9.4
    CVE-2026-33075 Public exploit

    FastGPT has Arbitrary Code Execution in GitHub Actions via pull_request_target in fastgpt-preview-image.yml

    FastGPT is an AI Agent building platform. In versions 4.14.8.3 and below, the fastgpt-preview-image.yml workflow is vulnerable to arbitrary code execution and secret exfiltration by any external contributor. It uses pull_request_target (which runs with access…

    labring FastGPT