Lucene search
K

4 matches found

Cvelist
Cvelist
added 2026/05/08 10:9 p.m.26 views

CVE-2026-42343 FastGPT: Uncontrolled Resource Consumption leading to Sandbox Exhaustion

FastGPT is an AI Agent building platform. In versions 4.14.13 and prior, the code-sandbox component suffers from insufficient resource isolation and uncontrolled resource consumption. The service relies solely on an application-level soft limit a 500ms polling interval for memory management and...

6.3CVSS0.00055EPSS
Exploits0References1
CVE
CVE
added 2026/05/08 10:9 p.m.12 views

CVE-2026-42343

CVE-2026-42343 (FastGPT) affects FastGPT’s code-sandbox in versions ≤ 4.14.13, due to insufficient resource isolation. The system relies on an application-level soft limit (500 ms polling) for memory management and lacks OS-level constraints (cgroups/kernel namespaces). This enables time-window b...

6.3CVSS5.8AI score0.00055EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/05/08 10:9 p.m.7 views

CVE-2026-42343

FastGPT is an AI Agent building platform. In versions 4.14.13 and prior, the code-sandbox component suffers from insufficient resource isolation and uncontrolled resource consumption. The service relies solely on an application-level soft limit a 500ms polling interval for memory management and...

6.3CVSS5.8AI score0.00055EPSS
Exploits0References2Affected Software1
EUVD
EUVD
added 2026/05/08 10:9 p.m.5 views

EUVD-2026-28853

FastGPT is an AI Agent building platform. In versions 4.14.13 and prior, the code-sandbox component suffers from insufficient resource isolation and uncontrolled resource consumption. The service relies solely on an application-level soft limit a 500ms polling interval for memory management and...

6.3CVSS5.8AI score0.00055EPSS
Exploits0References1
Rows per page
Query Builder