Browse CVEs

CRITICAL 9.8 CVE-2026-40351 FastGPT is an AI Agent building platform. In versions prior to 4.14.9.5, the password-based login endpoint uses TypeScript type assertion without run… Fastgpt 4.14.9.5+ Fix from $2,3002026-04-17 HIGH 8.8 CVE-2026-40352 FastGPT is an AI Agent building platform. In versions prior to 4.14.9.5, the password change endpoint is vulnerable to NoSQL injection. An authentica… Fastgpt 4.14.9.5+ Fix from $1,9502026-04-17 HIGH 8.1 CVE-2026-40252 FastGPT is an AI Agent building platform. Prior to 4.14.10.4, Broken Access Control vulnerability (IDOR/BOLA) allows any authenticated team to access… Fastgpt 4.14.10.4+ Fix from $1,9502026-04-10 MEDIUM 5.3 CVE-2026-40100 FastGPT is an AI Agent building platform. Prior to 4.14.10.3, the /api/core/app/mcpTools/runTool endpoint accepts arbitrary URLs without authenticati… Fastgpt 4.14.10.3+ Fix from $1,6002026-04-10 HIGH 7.7 CVE-2026-34163 FastGPT is an AI Agent building platform. Prior to version 4.14.9.5, FastGPT's MCP (Model Context Protocol) tools endpoints (/api/core/app/mcpTools/g… Fastgpt 4.14.9.5+ Fix from $1,9502026-03-31 CRITICAL 10.0 CVE-2026-34162 FastGPT is an AI Agent building platform. Prior to version 4.14.9.5, the FastGPT HTTP tools testing endpoint (/api/core/app/httpTools/runTool) is exp… Fastgpt 4.14.9.5+ Fix from $2,3002026-03-31 HIGH 8.8 CVE-2026-33075 FastGPT is an AI Agent building platform. In versions 4.14.8.3 and below, the fastgpt-preview-image.yml workflow is vulnerable to arbitrary code exec… Fastgpt after 4.14.8.3 Fix from $1,9502026-03-20 MEDIUM 6.3 CVE-2026-32128 FastGPT is an AI Agent building platform. In 4.14.7 and earlier, FastGPT's Python Sandbox (fastgpt-sandbox) includes guardrails intended to prevent f… Fastgpt after 4.14.7 Fix from $1,6002026-03-11 MEDIUM 5.4 CVE-2026-26075 FastGPT is an AI Agent building platform. Due to the fact that FastGPT's web page acquisition nodes, HTTP nodes, etc. need to initiate data acquisiti… Fastgpt 4.14.7+ Fix from $1,6002026-02-12 MEDIUM 5.4 CVE-2026-26003 FastGPT is an AI Agent building platform. From 4.14.0 to 4.14.5, attackers can directly access the plugin system through FastGPT/api/plugin/xxx witho… Fastgpt 4.14.5+ Fix from $1,6002026-02-10 MEDIUM 5.3 CVE-2025-62612 FastGPT is an AI Agent building platform. Prior to version 4.11.1, in the workflow file reading node, the network link is not security-verified, posi… Fastgpt 4.11.1+ Fix from $1,6002025-10-22 MEDIUM 6.1 CVE-2025-52552 FastGPT is an AI Agent building platform. Prior to version 4.9.12, the LastRoute Parameter on login page is vulnerable to open redirect and DOM-based… Fastgpt 4.9.12+ Fix from $1,6002025-06-21 CRITICAL 9.9 CVE-2025-49131 FastGPT is an open-source project that provides a platform for building, deploying, and operating AI-driven workflows and conversational agents. The … Fastgpt 4.9.11+ Fix from $2,3002025-06-09 MEDIUM 6.5 CVE-2025-27600 FastGPT is a knowledge-based platform built on the LLMs. Since the web crawling plug-in does not perform intranet IP verification, an attacker can in… Fastgpt 4.9.0+ Fix from $1,6002025-03-06