FA
Product
FastGPT
33
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 6High 11Medium 15Low 1
Watch
Add FastGPT to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-61684 | 8.8 | Jul 15 | FastGPT: Unauthenticated cross-tenant data access via forgeable plugin-invoke JWT (default INVOKE_TOKEN_SECRET='token') Affected: = 4.15.0-beta4 |
| CVE-2026-40352 | 8.8 | Apr 17 | FastGPT: NoSQL Injection in updatePasswordByOld Leads to Account Takeover Affected: < 4.14.9.5 |
| CVE-2026-33075 | 8.8 | Mar 20 | FastGPT has Arbitrary Code Execution in GitHub Actions via pull_request_target in fastgpt-preview-image.yml Affected: <= 4.14.8.3 |
| CVE-2026-55418 | 8.6 | Jul 7 | FastGPT: S3 presign/read handlers do not bind the object key to the caller's team (cross-team file disclosure) Affected: < 4.15.0-beta5 |
| CVE-2026-40252 | 8.1 | Apr 10 | Broken Access Control (IDOR) Leading to Cross-Tenant Application Access in FastGPT Affected: < 4.14.10.4 |
| CVE-2026-61644 | 7.7 | Jul 15 | FastGPT: /api/core/chat/record/getCollectionQuote can disclose cross-tenant dataset text due to an unbound initialId lookup Affected: >= 4.14.17, < 4.15.0-beta5 |
| CVE-2026-54607 | 7.7 | Jul 7 | FastGPT: SSRF in HTTP-tool OpenAPI schema importer via SwaggerParser $ref (bypasses the isInternalAddress guard) Affected: < 4.15.0-beta4 |
| CVE-2026-44285 | 7.7 | May 29 | FastGPT: SSRF Protection Bypass via `externalFile` in Dataset Preview API Affected: < 4.15.0-beta1 |
| CVE-2026-42345 | 7.7 | May 8 | FastGPT: Cloud metadata endpoint SSRF protection bypass via port specification, IPv6 mapping, hex/decimal IP encoding, and trailing dot Affected: <= 4.14.11 |
| CVE-2026-34163 | 7.7 | Mar 31 | Server-Side Request Forgery via MCP Tools Endpoint in FastGPT Affected: < 4.14.9.5 |
| CVE-2026-54602 | 7.1 | Jul 7 | FastGPT: Cross-team LLM request/response disclosure (IDOR) via /api/core/ai/record/getRecord Affected: < 4.15.0 |
Showing 11