fastgpt has 3 CVEs on record between 2025 and 2026. The median CVSS is 7.7 (high), with 1 rated critical. The most common weakness class is CWE-918 (3).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 7.7
- Publish → KEV
- —
- Last 90 days
- 0 prev 0
fastgpt vulnerabilities
CVEs affecting fastgpt, newest first. Open any entry for full detail, references, and exploit status.
3 CVEsRSS
CVE-2026-34163High· 7.7FastGPT is an AI Agent building platform
FastGPT is an AI Agent building platform. Prior to version 4.14.9.5, FastGPT's MCP (Model Context Protocol) tools endpoints (/api/core/app/mcpTools/getTools and /api/core/app/mcpTools/runTool) accept a user-supplied URL parameter and mak…
CVE-2026-34162Critical· 10.0FastGPT is an AI Agent building platform
FastGPT is an AI Agent building platform. Prior to version 4.14.9.5, the FastGPT HTTP tools testing endpoint (/api/core/app/httpTools/runTool) is exposed without any authentication. This endpoint acts as a full HTTP proxy — it accepts a …
CVE-2025-62612Medium· 5.3FastGPT is an AI Agent building platform
FastGPT is an AI Agent building platform. Prior to version 4.11.1, in the workflow file reading node, the network link is not security-verified, posing a risk of SSRF attacks. This issue has been patched in version 4.11.1.