PT-2026-33519

Name of the Vulnerable Software and Affected Versions FastGPT versions prior to 4.14.9.5 Description The password-based login endpoint uses TypeScript type assertion without runtime validation. This allows an unauthenticated attacker to use a MongoDB query operator object, such as "$ne": "", in t...