CVE-2026-26075
- EPSS 0.02%
- Veröffentlicht 12.02.2026 21:42:58
- Zuletzt bearbeitet 23.02.2026 16:52:24
FastGPT is an AI Agent building platform. Due to the fact that FastGPT's web page acquisition nodes, HTTP nodes, etc. need to initiate data acquisition requests from the server, there are certain security issues. In addition to implementing internal ...
CVE-2026-26003
- EPSS 0.06%
- Veröffentlicht 10.02.2026 18:16:39
- Zuletzt bearbeitet 23.02.2026 18:06:14
FastGPT is an AI Agent building platform. From 4.14.0 to 4.14.5, attackers can directly access the plugin system through FastGPT/api/plugin/xxx without authentication, thereby threatening the plugin system. This may cause the plugin system to crash a...
CVE-2025-62612
- EPSS 0.05%
- Veröffentlicht 22.10.2025 20:45:17
- Zuletzt bearbeitet 29.12.2025 19:08:53
FastGPT is an AI Agent building platform. Prior to version 4.11.1, in the workflow file reading node, the network link is not security-verified, posing a risk of SSRF attacks. This issue has been patched in version 4.11.1.
CVE-2025-52552
- EPSS 0.04%
- Veröffentlicht 21.06.2025 02:15:07
- Zuletzt bearbeitet 29.12.2025 19:06:40
FastGPT is an AI Agent building platform. Prior to version 4.9.12, the LastRoute Parameter on login page is vulnerable to open redirect and DOM-based XSS. Improper validation and lack of sanitization of this parameter allows attackers execute malicio...
CVE-2025-49131
- EPSS 0.27%
- Veröffentlicht 09.06.2025 12:42:46
- Zuletzt bearbeitet 29.12.2025 19:09:21
FastGPT is an open-source project that provides a platform for building, deploying, and operating AI-driven workflows and conversational agents. The Sandbox container (fastgpt-sandbox) is a specialized, isolated environment used by FastGPT to safely ...
CVE-2025-27600
- EPSS 0.1%
- Veröffentlicht 06.03.2025 19:15:28
- Zuletzt bearbeitet 29.12.2025 19:09:01
FastGPT is a knowledge-based platform built on the LLMs. Since the web crawling plug-in does not perform intranet IP verification, an attacker can initiate an intranet IP request, causing the system to initiate a request through the intranet and pote...