Fastgpt vulnerabilities

Products

• Fastgpt 14

Newest

• fastgpt FastGPT: NoSQL Injection in updatePasswordByOld Leads to Account Takeover CVE-2026-40352 8.8 HighApril 17, 2026
• fastgpt FastGPT: NoSQL Injection in loginByPassword leads to Authentication Bypass CVE-2026-40351 9.8 CriticalApril 17, 2026
• fastgpt Broken Access Control (IDOR) Leading to Cross-Tenant Application Access in FastGPT CVE-2026-40252 5.3 MediumApril 10, 2026
• fastgpt FastGPT has Unauthenticated SSRF in /api/core/app/mcpTools/runTool via missing CHECK_INTERNAL_IP default CVE-2026-40100 5.3 MediumApril 10, 2026
• fastgpt FastGPT: Unauthenticated SSRF via httpTools Endpoint Leads to Internal API Key Theft CVE-2026-34162 10.0 CriticalMarch 31, 2026
• fastgpt Server-Side Request Forgery via MCP Tools Endpoint in FastGPT CVE-2026-34163 7.7 HighMarch 31, 2026
• fastgpt FastGPT has Arbitrary Code Execution in GitHub Actions via pull_request_target in fastgpt-preview-image.yml CVE-2026-33075 Public exploit 9.4 CriticalMarch 20, 2026
• fastgpt FastGPT Python Sandbox Bypass of File-Write Restriction CVE-2026-32128 Public exploit 6.3 MediumMarch 11, 2026
• fastgpt Cross-Site Request Forgery (CSRF) in FastGPT CVE-2026-26075 6.9 MediumFebruary 12, 2026
• fastgpt FastGPT Plugin forwarding request is not authenticated, posing a serious risk of attack CVE-2026-26003 6.9 MediumFebruary 10, 2026
• fastgpt FastGPT File Reading Node SSRF Vulnerability CVE-2025-62612 6.9 MediumOctober 22, 2025
• fastgpt FastGPT LastRoute Parameter on Login Page Vulnerable to Open Redirect and DOM-based XSS CVE-2025-52552 5.5 MediumJune 21, 2025
• fastgpt FastGPT Sandbox Vulnerable to Sandbox Bypass CVE-2025-49131 Public exploit 6.3 MediumJune 9, 2025
• fastgpt FastGPT SSRF CVE-2025-27600 6.9 MediumMarch 6, 2025