fastgpt kayıtları
fastgpt üreticisine ait 14 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %85,7
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-918 Server-Side Request Forgery (SSRF)4
- CWE-943 Improper Neutralization of Special Elements in Data Query Logic2
- CWE-306 Missing Authentication for Critical Function1
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-494 Download of Code Without Integrity Check1
- CWE-184 Incomplete List of Disallowed Inputs1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
14 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2026-34162İstismar yok | FastGPT: Unauthenticated SSRF via httpTools Endpoint Leads to Internal API Key Theftfastgpt · fastgpt · CWE-306 | Kritik10,0 | — | %0,6 | 31 Mar 2026 |
39İzleyin | CVE-2026-40351İstismar yok | FastGPT: NoSQL Injection in loginByPassword leads to Authentication Bypassfastgpt · fastgpt · CWE-943 | Kritik9,8 | — | %0,6 | 17 Nis 2026 |
39İzleyin | CVE-2025-49131Kavram kanıtı | FastGPT Sandbox Vulnerable to Sandbox Bypassfastgpt · fastgpt · CWE-732 | Kritik9,9 | — | %0,5 | 9 Haz 2025 |
37İzleyin | CVE-2026-33075Kavram kanıtı | FastGPT has Arbitrary Code Execution in GitHub Actions via pull_request_target in fastgpt-preview-image.ymlfastgpt · fastgpt · CWE-494 | Kritik9,4 | — | %0,3 | 20 Mar 2026 |
35İzleyin | CVE-2026-40352İstismar yok | FastGPT: NoSQL Injection in updatePasswordByOld Leads to Account Takeoverfastgpt · fastgpt · CWE-943 | Yüksek8,8 | — | %0,5 | 17 Nis 2026 |
30İzleyin | CVE-2026-34163İstismar yok | Server-Side Request Forgery via MCP Tools Endpoint in FastGPTfastgpt · fastgpt · CWE-918 | Yüksek7,7 | — | %0,4 | 31 Mar 2026 |
27İzleyin | CVE-2026-26003İstismar yok | FastGPT Plugin forwarding request is not authenticated, posing a serious risk of attackfastgpt · fastgpt · CWE-601 | Orta6,9 | — | %0,5 | 10 Şub 2026 |
27İzleyin | CVE-2025-27600İstismar yok | FastGPT is a knowledge-based platform built on the LLMs.fastgpt · fastgpt · CWE-918 | Orta6,9 | — | %0,3 | 6 Mar 2025 |
27İzleyin | CVE-2025-62612İstismar yok | FastGPT File Reading Node SSRF Vulnerabilityfastgpt · fastgpt · CWE-918 | Orta6,9 | — | %0,2 | 22 Eki 2025 |
27İzleyin | CVE-2026-26075İstismar yok | Cross-Site Request Forgery (CSRF) in FastGPTfastgpt · fastgpt · CWE-352 | Orta6,9 | — | %0,2 | 12 Şub 2026 |
25İzleyin | CVE-2026-32128Kavram kanıtı | FastGPT Python Sandbox Bypass of File-Write Restrictionfastgpt · fastgpt · CWE-184 | Orta6,3 | — | %0,3 | 11 Mar 2026 |
22İzleyin | CVE-2025-52552İstismar yok | FastGPT LastRoute Parameter on Login Page Vulnerable to Open Redirect and DOM-based XSSfastgpt · fastgpt · CWE-79 | Orta5,5 | — | %0,3 | 20 Haz 2025 |
21İzleyin | CVE-2026-40252İstismar yok | Broken Access Control (IDOR) Leading to Cross-Tenant Application Access in FastGPTfastgpt · fastgpt · CWE-284 | Orta5,3 | — | %0,4 | 10 Nis 2026 |
21İzleyin | CVE-2026-40100İstismar yok | FastGPT has Unauthenticated SSRF in /api/core/app/mcpTools/runTool via missing CHECK_INTERNAL_IP defaultfastgpt · fastgpt · CWE-918 | Orta5,3 | — | %0,4 | 10 Nis 2026 |
- CVE-2026-3416240Planlayın
FastGPT: Unauthenticated SSRF via httpTools Endpoint Leads to Internal API Key Theft
KritikCVSS 10,0İstismar yokEPSS %1fastgpt · fastgpt31 Mar 2026
- CVE-2026-4035139İzleyin
FastGPT: NoSQL Injection in loginByPassword leads to Authentication Bypass
KritikCVSS 9,8İstismar yokEPSS %1fastgpt · fastgpt17 Nis 2026
- CVE-2025-4913139İzleyin
FastGPT Sandbox Vulnerable to Sandbox Bypass
KritikCVSS 9,9Kavram kanıtıEPSS %0fastgpt · fastgpt9 Haz 2025
- CVE-2026-3307537İzleyin
FastGPT has Arbitrary Code Execution in GitHub Actions via pull_request_target in fastgpt-preview-image.yml
KritikCVSS 9,4Kavram kanıtıEPSS %0fastgpt · fastgpt20 Mar 2026
- CVE-2026-4035235İzleyin
FastGPT: NoSQL Injection in updatePasswordByOld Leads to Account Takeover
YüksekCVSS 8,8İstismar yokEPSS %1fastgpt · fastgpt17 Nis 2026
- CVE-2026-3416330İzleyin
Server-Side Request Forgery via MCP Tools Endpoint in FastGPT
YüksekCVSS 7,7İstismar yokEPSS %0fastgpt · fastgpt31 Mar 2026
- CVE-2026-2600327İzleyin
FastGPT Plugin forwarding request is not authenticated, posing a serious risk of attack
OrtaCVSS 6,9İstismar yokEPSS %1fastgpt · fastgpt10 Şub 2026
- CVE-2025-2760027İzleyin
FastGPT is a knowledge-based platform built on the LLMs.
OrtaCVSS 6,9İstismar yokEPSS %0fastgpt · fastgpt6 Mar 2025
- CVE-2025-6261227İzleyin
FastGPT File Reading Node SSRF Vulnerability
OrtaCVSS 6,9İstismar yokEPSS %0fastgpt · fastgpt22 Eki 2025
- CVE-2026-2607527İzleyin
Cross-Site Request Forgery (CSRF) in FastGPT
OrtaCVSS 6,9İstismar yokEPSS %0fastgpt · fastgpt12 Şub 2026
- CVE-2026-3212825İzleyin
FastGPT Python Sandbox Bypass of File-Write Restriction
OrtaCVSS 6,3Kavram kanıtıEPSS %0fastgpt · fastgpt11 Mar 2026
- CVE-2025-5255222İzleyin
FastGPT LastRoute Parameter on Login Page Vulnerable to Open Redirect and DOM-based XSS
OrtaCVSS 5,5İstismar yokEPSS %0fastgpt · fastgpt20 Haz 2025
- CVE-2026-4025221İzleyin
Broken Access Control (IDOR) Leading to Cross-Tenant Application Access in FastGPT
OrtaCVSS 5,3İstismar yokEPSS %0fastgpt · fastgpt10 Nis 2026
- CVE-2026-4010021İzleyin
FastGPT has Unauthenticated SSRF in /api/core/app/mcpTools/runTool via missing CHECK_INTERNAL_IP default
OrtaCVSS 5,3İstismar yokEPSS %0fastgpt · fastgpt10 Nis 2026