Vulnerability record · CVE-2026-34162 · published 31 March 2026

CVE-2026-34162: Fastgpt missing authentication for critical function vulnerability

Fastgpt · Fastgpt

FastGPT is an AI Agent building platform. Prior to version 4.14.9.5, the FastGPT HTTP tools testing endpoint (/api/core/app/httpTools/runTool) is exposed without any authentication. This endpoint acts as a full HTTP proxy — it accepts a user-supplied baseUrl, toolPath, HTTP method, custom headers, and body, then makes a server-side HTTP request and returns the complete response to the caller. This issue has been patched in version 4.14.9.5.

10.0 CVSS 3.1 Critical EPSS 0.62% · top 52.4% CWE-306 · Missing authentication for critical functionCWE-918 · Server-side request forgery (SSRF)

10.0CVSS 3.1 base score

0.62%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

5References, 2 tagged exploit

24 Jul 2026Last modified by NVD

Description

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Fastgpt Fastgpt

References

Link	Tags
https://github.com/labring/FastGPT/commit/bc7eae2ed61481a5e322208829be291faec58c00	Patch
https://github.com/labring/FastGPT/pull/6640	Issue TrackingPatch
https://github.com/labring/FastGPT/releases/tag/v4.14.9.5	ProductRelease Notes
https://github.com/labring/FastGPT/security/advisories/GHSA-w36r-f268-pwrj	ExploitMitigationVendor Advisory
https://github.com/labring/FastGPT/security/advisories/GHSA-w36r-f268-pwrj	ExploitMitigationVendor Advisory

Track CVE-2026-34162 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.9CVE-2025-49131Fastgpt incorrect permission assignment vulnerabilityFastGPT is an open-source project that provides a platform for building, deploying, and operating AI-driven workflows and conversational agents. The …EPSS 0.45%9 Jun 2025 9.8CVE-2026-40351Fastgpt vulnerabilityFastGPT is an AI Agent building platform. In versions prior to 4.14.9.5, the password-based login endpoint uses TypeScript type assertion without run…EPSS 0.60%17 Apr 2026 9.4CVE-2026-33075Fastgpt download of code without integrity check vulnerabilityFastGPT is an AI Agent building platform. In versions 4.14.8.3 and below, the fastgpt-preview-image.yml workflow is vulnerable to arbitrary code exec…EPSS 0.32%20 Mar 2026 8.8CVE-2026-40352Fastgpt vulnerabilityFastGPT is an AI Agent building platform. In versions prior to 4.14.9.5, the password change endpoint is vulnerable to NoSQL injection. An authentica…EPSS 0.53%17 Apr 2026 7.7CVE-2026-34163Fastgpt server-side request forgery (ssrf) vulnerabilityFastGPT is an AI Agent building platform. Prior to version 4.14.9.5, FastGPT's MCP (Model Context Protocol) tools endpoints (/api/core/app/mcpTools/g…EPSS 0.42%31 Mar 2026 6.9CVE-2026-26075Fastgpt cross-site request forgery vulnerabilityFastGPT is an AI Agent building platform. Due to the fact that FastGPT's web page acquisition nodes, HTTP nodes, etc. need to initiate data acquisiti…EPSS 0.14%12 Feb 2026 6.9CVE-2026-26003Fastgpt open redirect vulnerabilityFastGPT is an AI Agent building platform. From 4.14.0 to 4.14.5, attackers can directly access the plugin system through FastGPT/api/plugin/xxx witho…EPSS 0.44%10 Feb 2026 6.9CVE-2025-62612Fastgpt server-side request forgery (ssrf) vulnerabilityFastGPT is an AI Agent building platform. Prior to version 4.11.1, in the workflow file reading node, the network link is not security-verified, posi…EPSS 0.24%22 Oct 2025

Source: NIST National Vulnerability Database (record CVE-2026-34162), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.