fastgpt-sandbox-audit

fastgpt-sandbox-audit FastGPT Python sandbox escape chain audit tool. The "Code Runner" node in FastGPT workflows passes user Python code to an isolated sandbox for execution. In v4.14.8, the sandbox protections are purely Python-level module blacklist + AST checks + open guard + import guard. Th...

cve-2025-49131-poc

CVE-2025-49131 - FastGPT Sandbox Escape POC ███████╗ █████╗ ███████╗████████╗ ██████╗ ██████╗ ████████╗ ██╔════╝██╔══██╗██╔════╝╚══██╔══╝██╔════╝ ██╔══██╗╚══██╔══╝ █████╗ ███████║███████╗ ██║ ██║ ███╗██████╔╝ ██║ ██╔══╝ ██╔══██║╚════██║ ██║ ██║ ██║██╔═══╝ ██║ ██║ ██║ ██║███████║ ██║ ╚██████╔╝██║...

CVE-2026-79483-FastGPT-NoSQL-Injection

CVE-2026-79483-FastGPT-NoSQL-Injection English | 中文 Vulnerability Overview Field| Details ---|--- CVE ID| CVE-2026-79483 Affected Product| FastGPT Community Edition Affected Versions| = 4.10.0 and = 4.15.0 Root Cause| Community-edition authOutLinkInit bypasses runtime type validation In FastGPT...

your-bot-my-inbox-cve-2026-68929-fastgpt-unauthenticated-wechat-channel-hijack

CVE-2026-68929 — FastGPT WeChat Channel Hijack PoC Unauthenticated, cross-tenant takeover of FastGPT's WeChat iLink share channel, keyed only on the publicshareId. | ---|--- CVE| CVE-2026-68929 CVSS 4.0 9.3 Critical Advisory| GHSA-q4pr-3qpg-9q5v Affected| FastGPT = 4.14.10, = 4.15.0,...

gha-lab-61c59f4acb

FastGPT English | 简体中文 | Bahasa Indonesia | ไทย | Tiếng Việt | 日本語 FastGPT is an AI Agent building platform that provides out-of-the-box capabilities for data processing and model invocation. It also enables workflow orchestration through Flow visualization, allowing you to achieve complex...

CVE-2026-84301

FastGPT is an open-source LLM platform for building AI applications on a knowledge base. Prior to 4.15.2, the safe Axios request interceptor in packages/service/common/api/axios.ts validates a hostname with isInternalAddress before a later HTTP connection performs an independent DNS lookup,...

CVE-2026-84301 FastGPT safe axios SSRF guard still allows DNS rebinding TOCTOU on protected outbound requests

FastGPT is an open-source LLM platform for building AI applications on a knowledge base. Prior to 4.15.2, the safe Axios request interceptor in packages/service/common/api/axios.ts validates a hostname with isInternalAddress before a later HTTP connection performs an independent DNS lookup,...

CVE-2026-84301 FastGPT safe axios SSRF guard still allows DNS rebinding TOCTOU on protected outbound requests

FastGPT is an open-source LLM platform for building AI applications on a knowledge base. Prior to 4.15.2, the safe Axios request interceptor in packages/service/common/api/axios.ts validates a hostname with isInternalAddress before a later HTTP connection performs an independent DNS lookup,...

CVE-2026-84301

The open-source LLM platform FastGPT is vulnerable to a DNS rebinding attack in versions prior to 4.15.2 . The root cause is a time-of-check/time-of-use (TOCTOU) flaw in the safe Axios request interceptor located in packages/service/common/api/axios.ts. The system validates a hostname using isInt...

CVE-2026-84301 FastGPT safe axios SSRF guard still allows DNS rebinding TOCTOU on protected outbound requests

FastGPT is an open-source LLM platform for building AI applications on a knowledge base. Prior to 4.15.2, the safe Axios request interceptor in packages/service/common/api/axios.ts validates a hostname with isInternalAddress before a later HTTP connection performs an independent DNS lookup,...

CVE-2026-84301: Server-Side Request Forgery (SSRF)

FastGPT is an open-source LLM platform for building AI applications on a knowledge base. Prior to 4.15.2, the safe Axios request interceptor in packages/service/common/api/axios.ts validates a hostname with isInternalAddress before a later HTTP connection performs an independent DNS lookup,...

PT-2026-96838

Name of the Vulnerable Software and Affected Versions FastGPT versions prior to 4.15.2 Description A DNS rebinding issue exists in the safe Axios request interceptor located in packages/service/common/api/axios.ts. The system validates a hostname using the isInternalAddress function before the HT...

CVE-2026-79483

FastGPT Community Edition 4.10.0 through 4.14.0 are vulnerable to a NoSQL injection in the POST /api/core/chat/getHistories endpoint. An unauthenticated attacker can inject malicious NoSQL operators via crafted JSON payloads to bypass authorization checks, resulting in unauthorized access to chat...

CVE-2026-79483

FastGPT Community Edition 4.10.0 through 4.14.0 are vulnerable to a NoSQL injection in the POST /api/core/chat/getHistories endpoint. An unauthenticated attacker can inject malicious NoSQL operators via crafted JSON payloads to bypass authorization checks, resulting in unauthorized access to chat...

CVE-2026-79483

FastGPT Community Edition 4.10.0 through 4.14.0 are vulnerable to a NoSQL injection in the POST /api/core/chat/getHistories endpoint. An unauthenticated attacker can inject malicious NoSQL operators via crafted JSON payloads to bypass authorization checks, resulting in unauthorized access to chat...

EUVD-2026-68876

FastGPT Community Edition 4.10.0 through 4.14.0 are vulnerable to a NoSQL injection in the POST /api/core/chat/getHistories endpoint. An unauthenticated attacker can inject malicious NoSQL operators via crafted JSON payloads to bypass authorization checks, resulting in unauthorized access to chat...

CVE-2026-79483

FastGPT Community Edition versions 4.10.0 through 4.14.0 are vulnerable to a NoSQL injection flaw in the POST /api/core/chat/getHistories endpoint. The root cause is that the authOutLinkInit() function fails to perform proper runtime type checks, allowing an unauthenticated attacker to inject mal...

CVE-2026-79483: Improper Neutralization of Special Elements in Data Query Logic

FastGPT Community Edition 4.10.0 through 4.14.0 are vulnerable to a NoSQL injection in the POST /api/core/chat/getHistories endpoint. An unauthenticated attacker can inject malicious NoSQL operators via crafted JSON payloads to bypass authorization checks, resulting in unauthorized access to chat...

CVE-2026-79483

FastGPT Community Edition 4.10.0 through 4.14.0 are vulnerable to a NoSQL injection in the POST /api/core/chat/getHistories endpoint. An unauthenticated attacker can inject malicious NoSQL operators via crafted JSON payloads to bypass authorization checks, resulting in unauthorized access to chat...

PT-2026-83999

FastGPT Community Edition 4.10.0 through 4.14.0 are vulnerable to a NoSQL injection in the POST /api/core/chat/getHistories endpoint. An unauthenticated attacker can inject malicious NoSQL operators via crafted JSON payloads to bypass authorization checks, resulting in unauthorized access to chat...