CVE-2026-61643
mediumpriority · track · 0OT risk · elevatedEPSS 0.002 · 9 %ileEUEPSS · scored 2026-10-26
FastGPT is a knowledge-based AI application platform. From 4.14.17 until 4.15.0-beta5, an authenticated FastGPT user can save a workflow node that points to another user's private HTTP toolset by using a crafted saved tool id such as http-<victim_toolset_app_id>/<tool_name>. The normal toolset routes deny access, but the workflow save and runtime path did not apply the same authorization check to the referenced toolset, allowing /api/v2/chat/completions to resolve the saved reference and execute the victim-owned HTTP tool. This issue is fixed in version 4.15.0-beta5.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode
ssvc
A stakeholder decision — act, attend, or track — from exploitation and impact.
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (1)
Products and version ranges known to be affected.
also known as (2)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (6)
External citations — patches, advisories, analysis.
- https://github.com/labring/FastGPT/releases/tag/v4.15.0-beta5cnnvd
- https://github.com/labring/FastGPT/security/advisories/GHSA-93r3-wqq3-c5chcnnvd
- https://github.com/labring/FastGPT/releases/tag/v4.15.0-beta5enisa_euvd
- https://github.com/labring/FastGPT/security/advisories/GHSA-93r3-wqq3-c5chenisa_euvd
- https://github.com/labring/FastGPT/releases/tag/v4.15.0-beta5nvd
- https://github.com/labring/FastGPT/security/advisories/GHSA-93r3-wqq3-c5chnvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan