PT-2026-60189 · Fastgpt · Fastgpt

CVE-2026-61644 · Published 2026-07-15 · Updated 2026-07-15

Positive Technologies (AI Summary)

CVSS v3.1

7.7

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions FastGPT versions 4.14.17 through 4.15.0-beta4

Description The POST '/api/core/chat/record/getCollectionQuote' endpoint authenticates the chat and collection context of the caller, but the center-node lookup for the initialId is not bound to the authorized context. This allows a low-privileged tenant user to provide their own valid appId, chatId, chatItemDataId, and collectionId while using another tenant's dataset data ID as the initialId. Consequently, the response may leak quotes or full-text content from a foreign dataset.

Recommendations Update to version 4.15.0-beta5.

Exploit

Fix

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

CVE-2026-61644

GHSA-MMG6-2G54-J896

Affected Products

Fastgpt

References · 7

• 🔥 https://github.com/labring/FastGPT/security/advisories/GHSA-mmg6-2g54-j896 · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/61xxx/CVE-2026-61644.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-61644 · Security Note
• https://osv.dev/vulnerability/CVE-2026-61644 · Vendor Advisory
• https://github.com/labring/FastGPT/pull/7173 · Note
• https://github.com/labring/FastGPT/commit/0c1840c7773c5be5d777f86228651479e02155db · Note
• https://github.com/labring/FastGPT/releases/tag/v4.15.0-beta5 · Note