labring FastGPT

• CVE-2026-84301 Medium 6.3 FastGPT safe axios SSRF guard still allows DNS rebinding TOCTOU on protected outbound requests 0.3%
• CVE-2026-68929 Critical 9.3 FastGPT: Unauthenticated WeChat channel hijack and denial of service via shareId-only authorization 0.4%
• CVE-2026-61643 Medium 5.9 FastGPT: workflow runtime can execute another user's private HTTP toolset 0.2%
• CVE-2026-50562 Critical 9.3 FastGPT: Untrusted PR artifacts are pushed and deployed by privileged preview workflows 0.2%
• CVE-2026-61646 Medium 6.3 FastGPT: Shared axios SSRF guard validates only the initial URL before following redirects 0.4%
• CVE-2026-61644 High 7.7 FastGPT: /api/core/chat/record/getCollectionQuote can disclose cross-tenant dataset text due to an unbound initialId lookup 0.3%
• CVE-2026-61684 High 8.8 FastGPT: Unauthenticated cross-tenant data access via forgeable plugin-invoke JWT (default INVOKE_TOKEN_SECRET='token') 0.4%
• CVE-2026-54602 High 7.1 FastGPT: Cross-team LLM request/response disclosure (IDOR) via /api/core/ai/record/getRecord 0.4%
• CVE-2026-54607 High 7.7 FastGPT: SSRF in HTTP-tool OpenAPI schema importer via SwaggerParser $ref (bypasses the isInternalAddress guard) 0.4%
• CVE-2026-55418 High 8.6 FastGPT: S3 presign/read handlers do not bind the object key to the caller's team (cross-team file disclosure) 0.5%
• CVE-2026-54601 Medium 6.3 FastGPT: reTrainingCollection allows server-owned datasetId override causing cross-tenant authorization confusion 0.3%
• CVE-2026-44287 Medium 6.3 FastGPT: sandbox escape to RCE - code-sandbox regex /\bimport\s*\(/ is bypassable 0.2%
• CVE-2026-44285 High 7.7 FastGPT: SSRF Protection Bypass via `externalFile` in Dataset Preview API 0.3%
• CVE-2026-44286 Low 2.3 FastGPT: SSRF Vulnerability in Laf Workflow Node via Missing Internal Address Validation 0.2%
• CVE-2026-44284 Medium 6.3 FastGPT: Stored MCP tool URL SSRF in FastGPT workflow execution 0.2%
• CVE-2026-42345 High 7.7 FastGPT: Cloud metadata endpoint SSRF protection bypass via port specification, IPv6 mapping, hex/decimal IP encoding, and trailing dot 0.2%
• CVE-2026-42344 Medium 6.3 FastGPT: DNS rebinding TOCTOU bypass in isInternalAddress allows SSRF on all protected endpoints 0.1%
• CVE-2026-42343 Medium 6.3 FastGPT: Uncontrolled Resource Consumption leading to Sandbox Exhaustion 0.3%
• CVE-2026-42302 Critical 9.8 FastGPT: Unauthenticated Remote Code Execution (RCE) via code-server Misconfiguration in agent-sandbox 0.7%
• CVE-2026-40352 High 8.8 FastGPT: NoSQL Injection in updatePasswordByOld Leads to Account Takeover 0.4%
• CVE-2026-40351 Critical 9.8 FastGPT: NoSQL Injection in loginByPassword leads to Authentication Bypass 0.6%
• CVE-2026-40252 Medium 5.3 Broken Access Control (IDOR) Leading to Cross-Tenant Application Access in FastGPT 0.3%
• CVE-2026-40100 Medium 5.3 FastGPT has Unauthenticated SSRF in /api/core/app/mcpTools/runTool via missing CHECK_INTERNAL_IP default 0.3%
• CVE-2026-34162 Critical 10.0 FastGPT: Unauthenticated SSRF via httpTools Endpoint Leads to Internal API Key Theft 0.4%
• CVE-2026-34163 High 7.7 Server-Side Request Forgery via MCP Tools Endpoint in FastGPT 0.3%
• CVE-2026-33075 Critical 9.4 FastGPT has Arbitrary Code Execution in GitHub Actions via pull_request_target in fastgpt-preview-image.yml 0.3%
• CVE-2026-32128 Medium 6.3 FastGPT Python Sandbox Bypass of File-Write Restriction 0.3%
• CVE-2026-26075 Medium 6.9 Cross-Site Request Forgery (CSRF) in FastGPT 0.1%
• CVE-2026-26003 Medium 6.9 FastGPT Plugin forwarding request is not authenticated, posing a serious risk of attack 0.3%
• CVE-2025-62612 Medium 6.9 FastGPT File Reading Node SSRF Vulnerability 0.2%
• CVE-2025-52552 Medium 5.5 FastGPT LastRoute Parameter on Login Page Vulnerable to Open Redirect and DOM-based XSS 0.3%
• CVE-2025-49131 Medium 6.3 FastGPT Sandbox Vulnerable to Sandbox Bypass 0.5%
• CVE-2025-27600 Medium 6.9 FastGPT SSRF 0.3%