PT-2026-7911 · Fastgpt · Fastgpt

0X5T · Published 2026-02-12 · Updated 2026-02-23 · CVE-2026-26075

Positive Technologies (AI Summary)

CVSS v4.0

6.9

Medium

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions FastGPT versions prior to 4.14.7

Description FastGPT is an AI Agent building platform. The platform’s web page acquisition nodes and HTTP nodes initiate data acquisition requests from the server, presenting certain security concerns. The issue is addressed through stricter internal network address detection and internal network isolation in the deployment environment.

Recommendations Update to version 4.14.7 or later.

Exploit

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2026-26075

GHSA-G345-7PQP-C395

Affected Products

Fastgpt

References · 7

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/26xxx/CVE-2026-26075.json · Exploit
• https://github.com/labring/FastGPT/security/advisories/GHSA-g345-7pqp-c395 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-26075 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-26075 · Security Note
• https://github.com/labring/FastGPT/releases/tag/v4.14.7 · Note
• https://twitter.com/CVEnew/status/2022069303994982901 · Twitter Post
• https://t.me/cveNotify/152885 · Telegram Post