CVE-2026-61643: Incorrect Authorization

FastGPT is a knowledge-based AI application platform. From 4.14.17 until 4.15.0-beta5, an authenticated FastGPT user can save a workflow node that points to another user's private HTTP toolset by using a crafted saved tool id such as http- / . The normal toolset routes deny access, but the workfl...