PT-2026-26590 · Fastgpt · Fastgpt

Arunstar · Publicado 2026-03-20 · Atualizado 2026-03-22 · CVE-2026-33075

Positive Technologies (AI Summary)

CVSS v4.0

9.4

Crítica

Vetor base

AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Name of the Vulnerable Software and Affected Versions FastGPT versions 4.14.8.3 and below

Description FastGPT is an AI Agent building platform. The fastgpt-preview-image.yml workflow is susceptible to arbitrary code execution and secret exfiltration by any external contributor. The workflow utilizes pull request target, which operates with access to repository secrets, but it checks out code from the pull request author's fork. Subsequently, it builds and pushes Docker images using Dockerfiles controlled by the attacker. This also enables a supply chain attack through the production container registry.

Recommendations Versions prior to 4.14.8.4 are affected. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Enumeração de Fraquezas

CWE-494

CWE-829

Identificadores relacionados

CVE-2026-33075

GHSA-XFX8-W35J-485C

Produtos afetados

Fastgpt

Referências · 7

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/33xxx/CVE-2026-33075.json · Exploit
• https://github.com/labring/FastGPT/security/advisories/GHSA-xfx8-w35j-485c · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2026-33075 · Nota de Segurança
• https://twitter.com/VulmonFeeds/status/2035028436222144783 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2026-33075 · Aviso do Fabricante
• https://twitter.com/0dayPublishing/status/2034916386695163923 · Publicação no Twitter
• https://twitter.com/CVEnew/status/2035627004649726435 · Publicação no Twitter