PT-2026-26590 · Fastgpt · Fastgpt

Arunstar · Published 2026-03-20 · Updated 2026-03-22 · CVE-2026-33075

Positive Technologies (AI Summary)

CVSS v4.0

9.4

Critical

Base vector

AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Name of the Vulnerable Software and Affected Versions FastGPT versions 4.14.8.3 and below

Description FastGPT is an AI Agent building platform. The fastgpt-preview-image.yml workflow is susceptible to arbitrary code execution and secret exfiltration by any external contributor. The workflow utilizes pull request target, which operates with access to repository secrets, but it checks out code from the pull request author's fork. Subsequently, it builds and pushes Docker images using Dockerfiles controlled by the attacker. This also enables a supply chain attack through the production container registry.

Recommendations Versions prior to 4.14.8.4 are affected. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-494

CWE-829

Related Identifiers

CVE-2026-33075

GHSA-XFX8-W35J-485C

Affected Products

Fastgpt

References · 7

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/33xxx/CVE-2026-33075.json · Exploit
• https://github.com/labring/FastGPT/security/advisories/GHSA-xfx8-w35j-485c · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-33075 · Security Note
• https://osv.dev/vulnerability/CVE-2026-33075 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/2035028436222144783 · Twitter Post
• https://twitter.com/0dayPublishing/status/2034916386695163923 · Twitter Post
• https://twitter.com/CVEnew/status/2035627004649726435 · Twitter Post