CVE-2026-61644 Details
Description
FastGPT is a knowledge-based AI application platform. From 4.14.17 until 4.15.0-beta5, the POST /api/core/chat/record/getCollectionQuote endpoint authenticates the caller's chat and collection context, but the initialId center-node lookup is not bound to that authorized context. A low-privileged tenant user can call the endpoint with valid attacker-owned appId, chatId, chatItemDataId, and collectionId values while supplying another tenant's dataset data id as initialId, causing the response to include foreign dataset quote or full-text content. This issue is fixed in version 4.15.0-beta5.
A vulnerability in FastGPT versions 4.14.17 prior to 4.15.0-beta5 allows low-privileged tenant users to access another tenant's dataset quotes or full-text content. This occurs through the POST /api/core/chat/record/getCollectionQuote endpoint, where the initialId lookup is not properly bound to the authorized context. An attacker can exploit this by using their own valid appId, chatId, chatItemDataId, and collectionId, while supplying a victim's dataset data id as initialId. The issue is rooted in the fact that the endpoint authenticates the chat and collection context but fails to restrict the initialId lookup to the same tenant, leading to unauthorized data access.
Users can update to FastGPT version 4.15.0-beta5, where this vulnerability has been fixed.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Jul 15, 2026CISA-ADP
Assessed Jul 15, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/labring/FastGPT/security/advisories/GHSA-mmg6-2g54-j896 | CISA-ADP | AdvisoryExploitRemedyTechnical AnalysisVendor |
| https://github.com/labring/FastGPT/commit/0c1840c7773c5be5d777f86228651479e02155db | [email protected] | Source CodeVendor |
| https://github.com/labring/FastGPT/pull/7173 | [email protected] | Source CodeVendor |
| https://github.com/labring/FastGPT/releases/tag/v4.15.0-beta5 | [email protected] | Release NotesVendor |
| https://github.com/labring/FastGPT/security/advisories/GHSA-mmg6-2g54-j896 | [email protected] | AdvisoryExploitRemedyTechnical AnalysisVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-863 | Incorrect Authorization | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| labring FastGPT | >= 4.14.17, <= 4.14.23 (semver) |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 15, 2026 | CVE Modified | CISA-ADP |
| Jul 15, 2026 | New CVE Received | [email protected] |