CVE-2026-61646 Details
Description
FastGPT is a knowledge-based AI application platform. Prior to 4.15.0-beta5, FastGPT's shared SSRF guard validates only the initial request URL before handing the request to axios, and axios follows redirects by default. An authenticated workflow user can configure an HTTP request node to call an attacker-controlled public URL that redirects to cloud metadata, loopback, or internal services that the guard would block on direct request, and the HTTP node returns the response body to the workflow caller. This issue is fixed in version 4.15.0-beta5.
A server-side request forgery (SSRF) vulnerability has been identified in FastGPT versions prior to 4.15.0-beta5. The issue arises because the application's shared SSRF guard only validates the initial request URL before it is sent via Axios, which by default follows redirects. This flaw allows an authenticated workflow user to manipulate an HTTP request node to call a user-controlled public URL that redirects to cloud metadata, loopback, or internal services that the guard would normally block if requested directly. The HTTP node then returns the response body to the workflow caller, effectively bypassing the SSRF protection.
Users can upgrade to FastGPT version 4.15.0-beta5, where this vulnerability has been fixed.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Jul 15, 2026CISA-ADP
Assessed Jul 15, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/labring/FastGPT/security/advisories/GHSA-g969-67mv-2qxq | CISA-ADP | AdvisoryExploitRemedyVendor |
| https://github.com/labring/FastGPT/releases/tag/v4.15.0-beta5 | [email protected] | Release NotesVendor |
| https://github.com/labring/FastGPT/security/advisories/GHSA-g969-67mv-2qxq | [email protected] | AdvisoryExploitRemedyVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-918 | Server-Side Request Forgery (SSRF) | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| labring FastGPT | < 4.15.0 (semver) |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 15, 2026 | CVE Modified | CISA-ADP |
| Jul 15, 2026 | New CVE Received | [email protected] |