Login Request a demo
FA
Product
FastGPT
by labring · last CVE Sep 22, 2026
33
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Vulnerabilities33In the news0Timeline
Severity mix
Critical 6High 11Medium 15Low 1
Severity
All severities33Critical6High11Medium15Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add FastGPT to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-34162
10.0
0%
Mar 31
FastGPT: Unauthenticated SSRF via httpTools Endpoint Leads to Internal API Key Theft
Affected: < 4.14.9.5
CVE-2025-49131
9.9
0%
Jun 9
FastGPT Sandbox Vulnerable to Sandbox Bypass
Affected: < 4.9.11
CVE-2026-42302
9.8
1%
May 8
FastGPT: Unauthenticated Remote Code Execution (RCE) via code-server Misconfiguration in agent-sandbox
Affected: >= 4.14.10, < 4.14.13
CVE-2026-40351
9.8
1%
Apr 17
FastGPT: NoSQL Injection in loginByPassword leads to Authentication Bypass
Affected: < 4.14.9.5
CVE-2026-68929
9.3
0%
Aug 27
FastGPT: Unauthenticated WeChat channel hijack and denial of service via shareId-only authorization
Affected: >= 4.14.10, < 4.14.29; >= 4.15.0, < 4.15.2
CVE-2026-50562
9.3
0%
Jul 15
FastGPT: Untrusted PR artifacts are pushed and deployed by privileged preview workflows
Affected: <= 22ebfacbb43311e9b73294040ae0eb87390c6bba
Showing 6