Skip to content
OpenAdvisories
Medium · 6.9 CVE-2025-62612 EUVD-2025-35630

FastGPT File Reading Node SSRF Vulnerability

Published Oct 22, 2025 · Updated Oct 23, 2025 · Assigned by GitHub_M

Description

FastGPT is an AI Agent building platform. Prior to version 4.11.1, in the workflow file reading node, the network link is not security-verified, posing a risk of SSRF attacks. This issue has been patched in version 4.11.1.

Affected products

VendorProductAffectedFixed
labring FastGPT < 4.11.1 —

References