PT-2026-39209 · Fastgpt · Fastgpt

Hinotoi-Agent · Published 2026-05-08 · Updated 2026-06-08 · CVE-2026-44284

Positive Technologies (AI Summary)

CVSS v3.1

6.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions FastGPT versions prior to 4.14.17

Description An inconsistent Server-Side Request Forgery (SSRF) protection gap exists in the handling of Model Context Protocol (MCP) tool URLs. While direct preview and run endpoints reject internal or private network URLs, the endpoints used to create or update MCP tools allow the storage of internal MCP server URLs. These stored URLs can subsequently be used by the workflow execution process without further validation of the destination. An authenticated user with permissions to manage MCP toolsets can store an internal endpoint, such as http://localhost:3000/mcp, causing the backend workflow runner to connect to that internal destination.

Recommendations Update to version 4.14.17.

Exploit

Fix

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2026-44284

Affected Products

Fastgpt

References · 8

• 🔥 https://github.com/labring/FastGPT/security/advisories/GHSA-cxxj-99f7-f5wq · Exploit
• 🔥 https://github.com/labring/FastGPT/pull/6826 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-44284 · Security Note
• https://github.com/labring/FastGPT/releases/tag/v4.14.17 · Note
• https://github.com/labring/FastGPT/commit/c1c6b9520d976d25ed945b5bc4e0768149e6db69 · Note
• https://t.me/CVEtracker/53182 · Telegram Post
• https://twitter.com/CVEnew/status/2053131421813031294 · Twitter Post
• https://twitter.com/cyera_io/status/2063975443934360041 · Twitter Post