Advisories · Technology
labring FastGPT.
Every CVE that names labring FastGPT among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.3 Medium
FastGPT safe axios SSRF guard still allows DNS rebinding TOCTOU on protected outbound requests
- labring FastGPT
- Server-side request forgery (SSRF)
- CVSS 9.3 CriticalCritical · CVSS 9+
FastGPT: Unauthenticated WeChat channel hijack and denial of service via shareId-only authorization
- labring FastGPT
- Authentication bypass
- Broken access control
- CVSS 5.9 Medium
FastGPT: workflow runtime can execute another user's private HTTP toolset
- labring FastGPT
- Broken access control
- CVSS 9.3 CriticalCritical · CVSS 9+
FastGPT: Untrusted PR artifacts are pushed and deployed by privileged preview workflows
- labring FastGPT
- Privilege escalation
- CWE-494
- CVSS 6.3 Medium
FastGPT: Shared axios SSRF guard validates only the initial URL before following redirects
- labring FastGPT
- Server-side request forgery (SSRF)
- CVSS 7.7 High
FastGPT: /api/core/chat/record/getCollectionQuote can disclose cross-tenant dataset text due to an unbound initialId lookup
- labring FastGPT
- Broken access control
- CVSS 8.8 High
FastGPT: Unauthenticated cross-tenant data access via forgeable plugin-invoke JWT (default INVOKE_TOKEN_SECRET='token')
- labring FastGPT
- Hard-coded credentials
- CVSS 7.1 High
FastGPT: Cross-team LLM request/response disclosure (IDOR) via /api/core/ai/record/getRecord
- labring FastGPT
- Broken access control
- CVSS 7.7 High
FastGPT: SSRF in HTTP-tool OpenAPI schema importer via SwaggerParser $ref (bypasses the isInternalAddress guard)
- labring FastGPT
- Server-side request forgery (SSRF)
- CVSS 8.6 High
FastGPT: S3 presign/read handlers do not bind the object key to the caller's team (cross-team file disclosure)
- labring FastGPT
- Broken access control
- CVSS 6.3 Medium
FastGPT: reTrainingCollection allows server-owned datasetId override causing cross-tenant authorization confusion
- labring FastGPT
- Broken access control
- CVSS 6.3 Medium
FastGPT: sandbox escape to RCE - code-sandbox regex /\bimport\s*\(/ is bypassable
- labring FastGPT
- Code injection
- CWE-184
- CVSS 7.7 High
FastGPT: SSRF Protection Bypass via `externalFile` in Dataset Preview API
- labring FastGPT
- Server-side request forgery (SSRF)
- CVSS 2.3 Low
FastGPT: SSRF Vulnerability in Laf Workflow Node via Missing Internal Address Validation
- labring FastGPT
- Server-side request forgery (SSRF)
- CVSS 6.3 Medium
FastGPT: Stored MCP tool URL SSRF in FastGPT workflow execution
- labring FastGPT
- Server-side request forgery (SSRF)
- CVSS 7.7 High
FastGPT: Cloud metadata endpoint SSRF protection bypass via port specification, IPv6 mapping, hex/decimal IP encoding, and trailing dot
- labring FastGPT
- Server-side request forgery (SSRF)
- CVSS 6.3 Medium
FastGPT: DNS rebinding TOCTOU bypass in isInternalAddress allows SSRF on all protected endpoints
- labring FastGPT
- Race condition
- CVSS 6.3 Medium
FastGPT: Uncontrolled Resource Consumption leading to Sandbox Exhaustion
- labring FastGPT
- Denial of service
- CVSS 9.8 CriticalCritical · CVSS 9+
FastGPT: Unauthenticated Remote Code Execution (RCE) via code-server Misconfiguration in agent-sandbox
- labring FastGPT
- Authentication bypass
- CVSS 8.8 High
FastGPT: NoSQL Injection in updatePasswordByOld Leads to Account Takeover
- labring FastGPT
- Other injection
- CVSS 9.8 CriticalCritical · CVSS 9+
FastGPT: NoSQL Injection in loginByPassword leads to Authentication Bypass
- labring FastGPT
- Other injection
- CVSS 5.3 Medium
Broken Access Control (IDOR) Leading to Cross-Tenant Application Access in FastGPT
- labring FastGPT
- Broken access control
- CVSS 5.3 Medium
FastGPT has Unauthenticated SSRF in /api/core/app/mcpTools/runTool via missing CHECK_INTERNAL_IP default
- labring FastGPT
- Server-side request forgery (SSRF)
- CVSS 10.0 CriticalCritical · CVSS 9+
FastGPT: Unauthenticated SSRF via httpTools Endpoint Leads to Internal API Key Theft
- labring FastGPT
- Authentication bypass
- Server-side request forgery (SSRF)
- CVSS 7.7 High
Server-Side Request Forgery via MCP Tools Endpoint in FastGPT
- labring FastGPT
- Server-side request forgery (SSRF)
- CVSS 9.4 CriticalCritical · CVSS 9+
FastGPT has Arbitrary Code Execution in GitHub Actions via pull_request_target in fastgpt-preview-image.yml
- labring FastGPT
- CWE-494
- CWE-829
- CVSS 6.3 Medium
FastGPT Python Sandbox Bypass of File-Write Restriction
- labring FastGPT
- CWE-184
- CVSS 6.9 Medium
Cross-Site Request Forgery (CSRF) in FastGPT
- labring FastGPT
- Cross-site request forgery (CSRF)
- CVSS 6.9 Medium
FastGPT Plugin forwarding request is not authenticated, posing a serious risk of attack
- labring FastGPT
- Open redirect
- CVSS 6.9 Medium
FastGPT File Reading Node SSRF Vulnerability
- labring FastGPT
- Server-side request forgery (SSRF)
- CVSS 5.5 Medium
FastGPT LastRoute Parameter on Login Page Vulnerable to Open Redirect and DOM-based XSS
- labring FastGPT
- Cross-site scripting (XSS)
- Open redirect
- CVSS 6.3 Medium
FastGPT Sandbox Vulnerable to Sandbox Bypass
- labring FastGPT
- Broken access control
- CVSS 6.9 Medium
FastGPT SSRF
- labring FastGPT
- Server-side request forgery (SSRF)