PT-2026-44980 · Fastgpt · Fastgpt

Bentamam · Published 2026-05-29 · Updated 2026-06-08 · CVE-2026-44287

Positive Technologies (AI Summary)

CVSS v3.1

6.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions FastGPT versions prior to 4.15.0-beta1

Description The JavaScript sandbox worker fails to properly block dynamic import() calls due to an insufficient regular expression. The regex /bimports*(/.test(code) only accounts for ASCII whitespace and does not detect block comments placed between the import keyword and the opening parenthesis. An attacker can use a payload such as import/**/("child process") to bypass this check. Since import() is not wrapped by the safeRequire Proxy, which only handles require calls, this allows the loading of the child process module and the execution of execSync(), leading to arbitrary command execution as uid=100(sandbox) within the sandbox container.

Recommendations Update to version 4.15.0-beta1.

Exploit

Fix

Code Injection

Incomplete List of Disallowed Inputs

Weakness Enumeration

CWE-94

CWE-184

Related Identifiers

CVE-2026-44287

Affected Products

Fastgpt

References · 4

• 🔥 https://github.com/labring/FastGPT/security/advisories/GHSA-f5mq-qxm4-5mvc · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-44287 · Security Note
• https://twitter.com/cyera_io/status/2063975443934360041 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2060535425731580095 · Twitter Post