Labring vulnerabilities
37 CVEs and advisories name Labring as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-84301FastGPT safe axios SSRF guard still allows DNS rebinding TOCTOU on protected outbound requests
- CVE-2026-68929FastGPT: Unauthenticated WeChat channel hijack and denial of service via shareId-only authorization
- CVE-2026-61643FastGPT: workflow runtime can execute another user's private HTTP toolset
- CVE-2026-50562FastGPT: Untrusted PR artifacts are pushed and deployed by privileged preview workflows
- CVE-2026-61646FastGPT: Shared axios SSRF guard validates only the initial URL before following redirects
- CVE-2026-61644FastGPT: /api/core/chat/record/getCollectionQuote can disclose cross-tenant dataset text due to an unbound initialId lookup
- CVE-2026-61684FastGPT: Unauthenticated cross-tenant data access via forgeable plugin-invoke JWT (default INVOKE_TOKEN_SECRET='token')
- CVE-2026-54602FastGPT: Cross-team LLM request/response disclosure (IDOR) via /api/core/ai/record/getRecord
- CVE-2026-54607FastGPT: SSRF in HTTP-tool OpenAPI schema importer via SwaggerParser $ref (bypasses the isInternalAddress guard)
- CVE-2026-55418FastGPT: S3 presign/read handlers do not bind the object key to the caller's team (cross-team file disclosure)
- CVE-2026-54601FastGPT: reTrainingCollection allows server-owned datasetId override causing cross-tenant authorization confusion
- CVE-2026-44287FastGPT: sandbox escape to RCE - code-sandbox regex /\bimport\s*\(/ is bypassable
- CVE-2026-44285FastGPT: SSRF Protection Bypass via `externalFile` in Dataset Preview API
- CVE-2026-44286FastGPT: SSRF Vulnerability in Laf Workflow Node via Missing Internal Address Validation
- CVE-2026-44284FastGPT: Stored MCP tool URL SSRF in FastGPT workflow execution
- CVE-2026-42345FastGPT: Cloud metadata endpoint SSRF protection bypass via port specification, IPv6 mapping, hex/decimal IP encoding, and trailing dot
- CVE-2026-42344FastGPT: DNS rebinding TOCTOU bypass in isInternalAddress allows SSRF on all protected endpoints
- CVE-2026-42343FastGPT: Uncontrolled Resource Consumption leading to Sandbox Exhaustion
- CVE-2026-42302FastGPT: Unauthenticated Remote Code Execution (RCE) via code-server Misconfiguration in agent-sandbox
- CVE-2026-40352FastGPT: NoSQL Injection in updatePasswordByOld Leads to Account Takeover
- CVE-2026-40351FastGPT: NoSQL Injection in loginByPassword leads to Authentication Bypass
- CVE-2026-40252Broken Access Control (IDOR) Leading to Cross-Tenant Application Access in FastGPT
- CVE-2026-40100FastGPT has Unauthenticated SSRF in /api/core/app/mcpTools/runTool via missing CHECK_INTERNAL_IP default
- CVE-2026-34162FastGPT: Unauthenticated SSRF via httpTools Endpoint Leads to Internal API Key Theft
- CVE-2026-34163Server-Side Request Forgery via MCP Tools Endpoint in FastGPT
- CVE-2026-33075FastGPT has Arbitrary Code Execution in GitHub Actions via pull_request_target in fastgpt-preview-image.yml
- CVE-2026-32128FastGPT Python Sandbox Bypass of File-Write Restriction
- CVE-2026-26075Cross-Site Request Forgery (CSRF) in FastGPT
- CVE-2026-26003FastGPT Plugin forwarding request is not authenticated, posing a serious risk of attack
- CVE-2025-62612FastGPT File Reading Node SSRF Vulnerability