PT-2025-43407 · Fastgpt · Fastgpt

0Gur1 · Published 2025-10-22 · Updated 2025-12-29 · CVE-2025-62612

Positive Technologies (AI Summary)

CVSS v4.0

6.9

Medium

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions FastGPT versions prior to 4.11.1

Description FastGPT is a platform for building AI Agents. Versions of FastGPT before 4.11.1 contain a Server-Side Request Forgery (SSRF) issue in the workflow file reading node. The system does not verify the security of network links, which could allow for SSRF attacks.

Recommendations Update to version 4.11.1 or later.

Exploit

Fix

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2025-62612

GHSA-573G-3567-8PHG

Affected Products

Fastgpt

References · 9

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/62xxx/CVE-2025-62612.json · Exploit
• https://github.com/labring/FastGPT/security/advisories/GHSA-573g-3567-8phg · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-62612 · Security Note
• https://osv.dev/vulnerability/CVE-2025-62612 · Vendor Advisory
• https://t.me/CVEtracker/35524 · Telegram Post
• https://twitter.com/CVEnew/status/1981219901592273141 · Twitter Post
• https://t.me/cveNotify/147064 · Telegram Post
• https://t.me/cveNotify/140445 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1981113166311362607 · Twitter Post