Vulnerability record · CVE-2026-26003 · published 10 February 2026

CVE-2026-26003: Fastgpt open redirect vulnerability

Fastgpt · Fastgpt

FastGPT is an AI Agent building platform. From 4.14.0 to 4.14.5, attackers can directly access the plugin system through FastGPT/api/plugin/xxx without authentication, thereby threatening the plugin system. This may cause the plugin system to crash and the loss of plugin installation status, but it will not result in key leakage. For older versions, as there are only operation interfaces for obtaining information, the impact is almost negligible. This vulnerability is fixed in 4.14.5-fix.

6.9 CVSS 4.0 Medium EPSS 0.44% · top 64.6% CWE-601 · Open redirect

6.9CVSS 4.0 base score

0.44%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

3References

17 Jun 2026Last modified by NVD

Description

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Fastgpt Fastgpt

References

Link	Tags
https://github.com/labring/FastGPT/commit/0beb52a2f3dc4067aab011cc98122d1352823b0c	Patch
https://github.com/labring/FastGPT/releases/tag/v4.14.5-fix	Release Notes
https://github.com/labring/FastGPT/security/advisories/GHSA-wcrg-g824-9gfg	Vendor Advisory

Track CVE-2026-26003 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2026-34162Fastgpt missing authentication for critical function vulnerabilityFastGPT is an AI Agent building platform. Prior to version 4.14.9.5, the FastGPT HTTP tools testing endpoint (/api/core/app/httpTools/runTool) is exp…EPSS 0.62%31 Mar 2026 9.9CVE-2025-49131Fastgpt incorrect permission assignment vulnerabilityFastGPT is an open-source project that provides a platform for building, deploying, and operating AI-driven workflows and conversational agents. The …EPSS 0.45%9 Jun 2025 9.8CVE-2026-40351Fastgpt vulnerabilityFastGPT is an AI Agent building platform. In versions prior to 4.14.9.5, the password-based login endpoint uses TypeScript type assertion without run…EPSS 0.60%17 Apr 2026 9.4CVE-2026-33075Fastgpt download of code without integrity check vulnerabilityFastGPT is an AI Agent building platform. In versions 4.14.8.3 and below, the fastgpt-preview-image.yml workflow is vulnerable to arbitrary code exec…EPSS 0.32%20 Mar 2026 8.8CVE-2026-40352Fastgpt vulnerabilityFastGPT is an AI Agent building platform. In versions prior to 4.14.9.5, the password change endpoint is vulnerable to NoSQL injection. An authentica…EPSS 0.53%17 Apr 2026 7.7CVE-2026-34163Fastgpt server-side request forgery (ssrf) vulnerabilityFastGPT is an AI Agent building platform. Prior to version 4.14.9.5, FastGPT's MCP (Model Context Protocol) tools endpoints (/api/core/app/mcpTools/g…EPSS 0.42%31 Mar 2026 6.9CVE-2026-26075Fastgpt cross-site request forgery vulnerabilityFastGPT is an AI Agent building platform. Due to the fact that FastGPT's web page acquisition nodes, HTTP nodes, etc. need to initiate data acquisiti…EPSS 0.14%12 Feb 2026 6.9CVE-2025-62612Fastgpt server-side request forgery (ssrf) vulnerabilityFastGPT is an AI Agent building platform. Prior to version 4.11.1, in the workflow file reading node, the network link is not security-verified, posi…EPSS 0.24%22 Oct 2025

Source: NIST National Vulnerability Database (record CVE-2026-26003), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.