Vulnerability index

Browse CVEs

14 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Fastgpt CRITICAL 9.8
CVE-2026-40351

FastGPT is an AI Agent building platform. In versions prior to 4.14.9.5, the password-based login endpoint uses TypeScript type assertion without run…

Fix: 4.14.9.5+
Fix from $2,300 2026-04-17
Fastgpt HIGH 8.8
CVE-2026-40352

FastGPT is an AI Agent building platform. In versions prior to 4.14.9.5, the password change endpoint is vulnerable to NoSQL injection. An authentica…

Fix: 4.14.9.5+
Fix from $1,950 2026-04-17
Fastgpt HIGH 8.1
CVE-2026-40252

FastGPT is an AI Agent building platform. Prior to 4.14.10.4, Broken Access Control vulnerability (IDOR/BOLA) allows any authenticated team to access…

Fix: 4.14.10.4+
Fix from $1,950 2026-04-10
Fastgpt MEDIUM 5.3
CVE-2026-40100

FastGPT is an AI Agent building platform. Prior to 4.14.10.3, the /api/core/app/mcpTools/runTool endpoint accepts arbitrary URLs without authenticati…

Fix: 4.14.10.3+
Fix from $1,600 2026-04-10
Fastgpt HIGH 7.7
CVE-2026-34163

FastGPT is an AI Agent building platform. Prior to version 4.14.9.5, FastGPT's MCP (Model Context Protocol) tools endpoints (/api/core/app/mcpTools/g…

Fix: 4.14.9.5+
Fix from $1,950 2026-03-31
Fastgpt CRITICAL 10.0
CVE-2026-34162

FastGPT is an AI Agent building platform. Prior to version 4.14.9.5, the FastGPT HTTP tools testing endpoint (/api/core/app/httpTools/runTool) is exp…

Fix: 4.14.9.5+
Fix from $2,300 2026-03-31
Fastgpt HIGH 8.8
CVE-2026-33075

FastGPT is an AI Agent building platform. In versions 4.14.8.3 and below, the fastgpt-preview-image.yml workflow is vulnerable to arbitrary code exec…

Fix: after 4.14.8.3
Fix from $1,950 2026-03-20
Fastgpt MEDIUM 6.3
CVE-2026-32128

FastGPT is an AI Agent building platform. In 4.14.7 and earlier, FastGPT's Python Sandbox (fastgpt-sandbox) includes guardrails intended to prevent f…

Fix: after 4.14.7
Fix from $1,600 2026-03-11
Fastgpt MEDIUM 5.4
CVE-2026-26075

FastGPT is an AI Agent building platform. Due to the fact that FastGPT's web page acquisition nodes, HTTP nodes, etc. need to initiate data acquisiti…

Fix: 4.14.7+
Fix from $1,600 2026-02-12
Fastgpt MEDIUM 5.4
CVE-2026-26003

FastGPT is an AI Agent building platform. From 4.14.0 to 4.14.5, attackers can directly access the plugin system through FastGPT/api/plugin/xxx witho…

Fix: 4.14.5+
Fix from $1,600 2026-02-10
Fastgpt MEDIUM 5.3
CVE-2025-62612

FastGPT is an AI Agent building platform. Prior to version 4.11.1, in the workflow file reading node, the network link is not security-verified, posi…

Fix: 4.11.1+
Fix from $1,600 2025-10-22
Fastgpt MEDIUM 6.1
CVE-2025-52552

FastGPT is an AI Agent building platform. Prior to version 4.9.12, the LastRoute Parameter on login page is vulnerable to open redirect and DOM-based…

Fix: 4.9.12+
Fix from $1,600 2025-06-21
Fastgpt CRITICAL 9.9
CVE-2025-49131

FastGPT is an open-source project that provides a platform for building, deploying, and operating AI-driven workflows and conversational agents. The …

Fix: 4.9.11+
Fix from $2,300 2025-06-09
Fastgpt MEDIUM 6.5
CVE-2025-27600

FastGPT is a knowledge-based platform built on the LLMs. Since the web crawling plug-in does not perform intranet IP verification, an attacker can in…

Fix: 4.9.0+
Fix from $1,600 2025-03-06