Vulnerability · Published Apr 10, 2026 · Assigned by GitHub_M

CVE-2026-40252Broken Access Control (IDOR) Leading to Cross-Tenant Application Access in FastGPT

Medium 5.3

In plain English

A medium-severity improper access control in FastGPT from labring. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 28% of all known vulnerabilities).

Severity (CVSS 4.0)5.3Medium

Exploit odds (30 days)0.3%top 72.2% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

FastGPT is an AI Agent building platform. Prior to 4.14.10.4, Broken Access Control vulnerability (IDOR/BOLA) allows any authenticated team to access and execute applications belonging to other teams by supplying a foreign appId. While the API correctly validates the team token, it does not verify that the requested application belongs to the authenticated team. This leads to cross-tenant data exposure and unauthorized execution of private AI workflows. This vulnerability is fixed in 4.14.10.4.

Affected products (as reported)

Vendor	Product	Versions
labring	FastGPT	< 4.14.10.4

Weakness: CWE-284, CWE-639 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N

References

https://github.com/labring/FastGPT/security/advisories/GHSA-gc8m-w37w-24hw x_refsource_CONFIRM
https://github.com/labring/FastGPT/releases/tag/v4.14.10.4 x_refsource_MISC