by Kastro
Paper/Archive/CVE-2026-34162

CVE-2026-34162

labring FastGPT — FastGPT: Unauthenticated SSRF via httpTools Endpoint Leads to Internal API Key Theft

EPSS 0.4%public exploitCVSS 10.0
critical.is priorityof 100
47
CVSS 10.0 (CNA, NVD agree)10.0 / 10 × 3030.0Not in CISA KEV+300.0EPSS percentile 36.7.367 × 207.3Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

FastGPT is an AI Agent building platform. Prior to version 4.14.9.5, the FastGPT HTTP tools testing endpoint (/api/core/app/httpTools/runTool) is exposed without any authentication. This endpoint acts as a full HTTP proxy — it accepts a user-supplied baseUrl, toolPath, HTTP method, custom headers, and body, then makes a server-side HTTP request and returns the complete response to the caller. This issue has been patched in version 4.14.9.5.

Affected

ProductAffectedFixed inSource
FastGPT< 4.14.9.5–CNA

Scores by source

GitHub_M (CNA)10.0CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L
NVD10.0CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N
CISA ADPSSVCExploitation: poc · Automatable: yes · Technical impact: total

References

exploitgithub.com/labring/FastGPT/security/advisories/GHSA-w36r-f268-pwrjrefgithub.com/labring/FastGPT/pull/6640refgithub.com/labring/FastGPT/commit/bc7eae2ed61481a5e322208829be291faec58c00refgithub.com/labring/FastGPT/releases/tag/v4.14.9.5