Lucene search
+L

2 matches found

NVD
NVD
•added 2026/03/20 9:16 a.m.•35 views

CVE-2026-33075

FastGPT is an AI Agent building platform. In versions 4.14.8.3 and below, the fastgpt-preview-image.yml workflow is vulnerable to arbitrary code execution and secret exfiltration by any external contributor. It uses pullrequesttarget which runs with access to repository secrets but checks out cod...

9.4CVSS0.00302EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2026/03/20 8:37 a.m.•13 views

CVE-2026-33075

FastGPT is an AI Agent building platform. In versions 4.14.8.3 and below, the fastgpt-preview-image.yml workflow is vulnerable to arbitrary code execution and secret exfiltration by any external contributor. It uses pullrequesttarget which runs with access to repository secrets but checks out cod...

9.4CVSS6.3AI score0.00302EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder