Vulnerability · Published Feb 10, 2026 · Assigned by GitHub_M

CVE-2026-26003FastGPT Plugin forwarding request is not authenticated, posing a serious risk of attack

Medium 6.9

In plain English

A medium-severity open redirect in FastGPT from labring. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 19% of all known vulnerabilities).

Severity (CVSS 4.0)6.9Medium

Exploit odds (30 days)0.3%top 80.7% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

FastGPT is an AI Agent building platform. From 4.14.0 to 4.14.5, attackers can directly access the plugin system through FastGPT/api/plugin/xxx without authentication, thereby threatening the plugin system. This may cause the plugin system to crash and the loss of plugin installation status, but it will not result in key leakage. For older versions, as there are only operation interfaces for obtaining information, the impact is almost negligible. This vulnerability is fixed in 4.14.5-fix.

Affected products (as reported)

Vendor	Product	Versions
labring	FastGPT	>= 4.14.0, < 4.14.5-fix

Weakness: CWE-601 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:L/SA:L

References

https://github.com/labring/FastGPT/security/advisories/GHSA-wcrg-g824-9gfg x_refsource_CONFIRM
https://github.com/labring/FastGPT/commit/0beb52a2f3dc4067aab011cc98122d1352823b0c x_refsource_MISC
https://github.com/labring/FastGPT/releases/tag/v4.14.5-fix x_refsource_MISC