# cve.now: Labring

The newest entries naming Labring as an affected vendor (up to 200), of 37 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-84301](https://cve.now/CVE-2026-84301.md): FastGPT safe axios SSRF guard still allows DNS rebinding TOCTOU on protected outbound requests (CVSS 6.3)
- [CVE-2026-68929](https://cve.now/CVE-2026-68929.md): FastGPT: Unauthenticated WeChat channel hijack and denial of service via shareId-only authorization (CVSS 9.3)
- [CVE-2026-61643](https://cve.now/CVE-2026-61643.md): FastGPT: workflow runtime can execute another user's private HTTP toolset (CVSS 5.9)
- [CVE-2026-50562](https://cve.now/CVE-2026-50562.md): FastGPT: Untrusted PR artifacts are pushed and deployed by privileged preview workflows (CVSS 9.3)
- [CVE-2026-61646](https://cve.now/CVE-2026-61646.md): FastGPT: Shared axios SSRF guard validates only the initial URL before following redirects (CVSS 6.3)
- [CVE-2026-61644](https://cve.now/CVE-2026-61644.md): FastGPT: /api/core/chat/record/getCollectionQuote can disclose cross-tenant dataset text due to an unbound initialId lookup (CVSS 7.7)
- [CVE-2026-61684](https://cve.now/CVE-2026-61684.md): FastGPT: Unauthenticated cross-tenant data access via forgeable plugin-invoke JWT (default INVOKE\_TOKEN\_SECRET='token') (CVSS 8.8)
- [CVE-2026-54602](https://cve.now/CVE-2026-54602.md): FastGPT: Cross-team LLM request/response disclosure (IDOR) via /api/core/ai/record/getRecord (CVSS 7.1)
- [CVE-2026-54607](https://cve.now/CVE-2026-54607.md): FastGPT: SSRF in HTTP-tool OpenAPI schema importer via SwaggerParser $ref (bypasses the isInternalAddress guard) (CVSS 7.7)
- [CVE-2026-55418](https://cve.now/CVE-2026-55418.md): FastGPT: S3 presign/read handlers do not bind the object key to the caller's team (cross-team file disclosure) (CVSS 8.6)
- [CVE-2026-54601](https://cve.now/CVE-2026-54601.md): FastGPT: reTrainingCollection allows server-owned datasetId override causing cross-tenant authorization confusion (CVSS 6.3)
- [CVE-2026-44287](https://cve.now/CVE-2026-44287.md): FastGPT: sandbox escape to RCE - code-sandbox regex /\\bimport\\s\*\\(/ is bypassable (CVSS 6.3)
- [CVE-2026-44285](https://cve.now/CVE-2026-44285.md): FastGPT: SSRF Protection Bypass via \`externalFile\` in Dataset Preview API (CVSS 7.7)
- [CVE-2026-44286](https://cve.now/CVE-2026-44286.md): FastGPT: SSRF Vulnerability in Laf Workflow Node via Missing Internal Address Validation (CVSS 2.3)
- [CVE-2026-44284](https://cve.now/CVE-2026-44284.md): FastGPT: Stored MCP tool URL SSRF in FastGPT workflow execution (CVSS 6.3)
- [CVE-2026-42345](https://cve.now/CVE-2026-42345.md): FastGPT: Cloud metadata endpoint SSRF protection bypass via port specification, IPv6 mapping, hex/decimal IP encoding, and trailing dot (CVSS 7.7)
- [CVE-2026-42344](https://cve.now/CVE-2026-42344.md): FastGPT: DNS rebinding TOCTOU bypass in isInternalAddress allows SSRF on all protected endpoints (CVSS 6.3)
- [CVE-2026-42343](https://cve.now/CVE-2026-42343.md): FastGPT: Uncontrolled Resource Consumption leading to Sandbox Exhaustion (CVSS 6.3)
- [CVE-2026-42302](https://cve.now/CVE-2026-42302.md): FastGPT: Unauthenticated Remote Code Execution (RCE) via code-server Misconfiguration in agent-sandbox (CVSS 9.8)
- [CVE-2026-40352](https://cve.now/CVE-2026-40352.md): FastGPT: NoSQL Injection in updatePasswordByOld Leads to Account Takeover (CVSS 8.8)
- [CVE-2026-40351](https://cve.now/CVE-2026-40351.md): FastGPT: NoSQL Injection in loginByPassword leads to Authentication Bypass (CVSS 9.8)
- [CVE-2026-40252](https://cve.now/CVE-2026-40252.md): Broken Access Control (IDOR) Leading to Cross-Tenant Application Access in FastGPT (CVSS 5.3)
- [CVE-2026-40100](https://cve.now/CVE-2026-40100.md): FastGPT has Unauthenticated SSRF in /api/core/app/mcpTools/runTool via missing CHECK\_INTERNAL\_IP default (CVSS 5.3)
- [CVE-2026-34162](https://cve.now/CVE-2026-34162.md): FastGPT: Unauthenticated SSRF via httpTools Endpoint Leads to Internal API Key Theft (CVSS 10.0)
- [CVE-2026-34163](https://cve.now/CVE-2026-34163.md): Server-Side Request Forgery via MCP Tools Endpoint in FastGPT (CVSS 7.7)
- [CVE-2026-33075](https://cve.now/CVE-2026-33075.md): FastGPT has Arbitrary Code Execution in GitHub Actions via pull\_request\_target in fastgpt-preview-image.yml (CVSS 9.4)
- [CVE-2026-32128](https://cve.now/CVE-2026-32128.md): FastGPT Python Sandbox Bypass of File-Write Restriction (CVSS 6.3)
- [CVE-2026-26075](https://cve.now/CVE-2026-26075.md): Cross-Site Request Forgery (CSRF) in FastGPT (CVSS 6.9)
- [CVE-2026-26003](https://cve.now/CVE-2026-26003.md): FastGPT Plugin forwarding request is not authenticated, posing a serious risk of attack (CVSS 6.9)
- [CVE-2025-62612](https://cve.now/CVE-2025-62612.md): FastGPT File Reading Node SSRF Vulnerability (CVSS 6.9)
- [CVE-2025-52552](https://cve.now/CVE-2025-52552.md): FastGPT LastRoute Parameter on Login Page Vulnerable to Open Redirect and DOM-based XSS (CVSS 5.5)
- [CVE-2025-49131](https://cve.now/CVE-2025-49131.md): FastGPT Sandbox Vulnerable to Sandbox Bypass (CVSS 6.3)
- [CVE-2025-27600](https://cve.now/CVE-2025-27600.md): FastGPT SSRF (CVSS 6.9)
- [CVE-2023-50253](https://cve.now/CVE-2023-50253.md): laf logs leak (CVSS 9.7)
- [CVE-2023-48225](https://cve.now/CVE-2023-48225.md): Laf env causes sensitive information disclosure (CVSS 8.9)
- [CVE-2023-36815](https://cve.now/CVE-2023-36815.md): Sealos billing system permission control defect (CVSS 7.3)
- [CVE-2023-33190](https://cve.now/CVE-2023-33190.md): Improperly configured permissions in Sealos (CVSS 10.0)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/labring
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.