High severity · published Jul 7, 2026
CVE-2026-54602
FastGPT: Cross-team LLM request/response disclosure (IDOR) via /api/core/ai/record/getRecord
7.1
CVSS
0.4%
EPSS
No
On KEV
Description
FastGPT is a knowledge-based AI application platform. Prior to 4.15.0, GET /api/core/ai/record/getRecord authenticates the caller but loads LLM request and response traces only by requestId without team scoping, allowing any authenticated user to read another team's prompts, retrieved RAG chunks, and completions if the requestId is known. This issue is fixed in version 4.15.0.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 30% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FA
FastGPT · labring
< 4.15.0 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-54602
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-54602
github.com
https://github.com/labring/FastGPT/commit/60c62b7af8269c826885b541bb56e6e5c424c11a
github.com
https://github.com/labring/FastGPT/security/advisories/GHSA-6vx6-f72r-74cg
More from FastGPT
10.0
CVE-2026-34162
FastGPT: Unauthenticated SSRF via httpTools Endpoint Leads to Internal API Key Theft
9.9
CVE-2025-49131
FastGPT Sandbox Vulnerable to Sandbox Bypass
9.8
CVE-2026-42302
FastGPT: Unauthenticated Remote Code Execution (RCE) via code-server Misconfiguration in agent-sandbox
9.8
CVE-2026-40351
FastGPT: NoSQL Injection in loginByPassword leads to Authentication Bypass
9.3
CVE-2026-68929
FastGPT: Unauthenticated WeChat channel hijack and denial of service via shareId-only authorization