Known Vulnerabilities for FastGPT by Labring
Listed below are 10 of the newest known vulnerabilities associated with "FastGPT" by "Labring".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-44286 json | FastGPT is an AI Agent building platform. Prior to version 4.14.17, an unauthenticated Server-Side Request Forgery (SSRF) vul... | Not Provided | 2026-05-08 | 2026-05-11 |
| CVE-2026-44284 json | FastGPT is an AI Agent building platform. Prior to version 4.14.17, FastGPT had an inconsistent SSRF protection gap in MCP to... | Not Provided | 2026-05-08 | 2026-05-11 |
| CVE-2026-42345 json | FastGPT is an AI Agent building platform. In versions 4.14.11 and prior, FastGPT's isInternalAddress() function in packages/s... | Not Provided | 2026-05-08 | 2026-05-08 |
| CVE-2026-42344 json | FastGPT is an AI Agent building platform. In versions 4.14.11 and prior, FastGPT's isInternalAddress() function in packages/s... | Not Provided | 2026-05-08 | 2026-05-11 |
| CVE-2026-42343 json | FastGPT is an AI Agent building platform. In versions 4.14.13 and prior, the code-sandbox component suffers from insufficient... | Not Provided | 2026-05-08 | 2026-05-12 |
| CVE-2026-42302 json | FastGPT is an AI Agent building platform. From version 4.14.10 to before version 4.14.13, the agent-sandbox component of Fast... | Not Provided | 2026-05-08 | 2026-05-12 |
| CVE-2026-40352 json | FastGPT is an AI Agent building platform. In versions prior to 4.14.9.5, the password change endpoint is vulnerable to NoSQL ... | Not Provided | 2026-04-17 | 2026-04-20 |
| CVE-2026-40351 json | FastGPT is an AI Agent building platform. In versions prior to 4.14.9.5, the password-based login endpoint uses TypeScript ty... | Not Provided | 2026-04-17 | 2026-04-20 |
| CVE-2026-40252 json | FastGPT is an AI Agent building platform. Prior to 4.14.10.4, Broken Access Control vulnerability (IDOR/BOLA) allows any auth... | Not Provided | 2026-04-10 | 2026-04-13 |
| CVE-2026-40100 json | FastGPT is an AI Agent building platform. Prior to 4.14.10.3, the /api/core/app/mcpTools/runTool endpoint accepts arbitrary U... | Not Provided | 2026-04-10 | 2026-04-15 |