CVE Browser

FastGPT safe axios SSRF guard still allows DNS rebinding TOCTOU on protected outbound requests

FastGPT: Unauthenticated WeChat channel hijack and denial of service via shareId-only authorization

FastGPT: workflow runtime can execute another user's private HTTP toolset

FastGPT: Untrusted PR artifacts are pushed and deployed by privileged preview workflows

FastGPT: Shared axios SSRF guard validates only the initial URL before following redirects

FastGPT: /api/core/chat/record/getCollectionQuote can disclose cross-tenant dataset text due to an unbound initialId lookup

FastGPT: Unauthenticated cross-tenant data access via forgeable plugin-invoke JWT (default INVOKE_TOKEN_SECRET='token')

FastGPT: Cross-team LLM request/response disclosure (IDOR) via /api/core/ai/record/getRecord

FastGPT: SSRF in HTTP-tool OpenAPI schema importer via SwaggerParser $ref (bypasses the isInternalAddress guard)

FastGPT: S3 presign/read handlers do not bind the object key to the caller's team (cross-team file disclosure)

FastGPT: reTrainingCollection allows server-owned datasetId override causing cross-tenant authorization confusion

FastGPT: sandbox escape to RCE - code-sandbox regex /\bimport\s*\(/ is bypassable

FastGPT: SSRF Protection Bypass via `externalFile` in Dataset Preview API

FastGPT: SSRF Vulnerability in Laf Workflow Node via Missing Internal Address Validation

FastGPT: Stored MCP tool URL SSRF in FastGPT workflow execution

FastGPT: Cloud metadata endpoint SSRF protection bypass via port specification, IPv6 mapping, hex/decimal IP encoding, and trailing dot

FastGPT: DNS rebinding TOCTOU bypass in isInternalAddress allows SSRF on all protected endpoints

FastGPT: Uncontrolled Resource Consumption leading to Sandbox Exhaustion

FastGPT: Unauthenticated Remote Code Execution (RCE) via code-server Misconfiguration in agent-sandbox

FastGPT: NoSQL Injection in updatePasswordByOld Leads to Account Takeover

FastGPT: NoSQL Injection in loginByPassword leads to Authentication Bypass

Broken Access Control (IDOR) Leading to Cross-Tenant Application Access in FastGPT

FastGPT has Unauthenticated SSRF in /api/core/app/mcpTools/runTool via missing CHECK_INTERNAL_IP default

FastGPT: Unauthenticated SSRF via httpTools Endpoint Leads to Internal API Key Theft

Server-Side Request Forgery via MCP Tools Endpoint in FastGPT