CVE-2026-84301

The open-source LLM platform FastGPT is vulnerable to a DNS rebinding attack in versions prior to 4.15.2 . The root cause is a time-of-check/time-of-use (TOCTOU) flaw in the safe Axios request interceptor located in packages/service/common/api/axios.ts. The system validates a hostname using isInt...