CVE-2026-61684 Details
Description
FastGPT is a knowledge-based AI application platform. In 4.15.0-beta4, FastGPT plugin invoke reverse-call endpoints under /api/invoke/* authenticate only by verifying a JWT signed with INVOKE_TOKEN_SECRET, which defaults to the constant string token and was not set in official deployment templates. An unauthenticated attacker can self-sign an HS256 JWT and reach /api/invoke/userInfo to disclose cross-tenant user PII by attacker-supplied tmbId values, or /api/invoke/fileUpload to write attacker-controlled content into chat files. This issue is fixed in version 4.15.0-beta5.
A vulnerability in FastGPT version 4.15.0-beta4 allows unauthenticated cross-tenant data access through the exploitation of the plugin-invoke JWT authentication mechanism. The vulnerability arises because the INVOKE_TOKEN_SECRET, which is supposed to secure the reverse-call endpoints, defaults to a constant string 'token' and is not properly set in official deployment templates. This flaw enables an attacker to self-sign a JWT and access sensitive user information or manipulate chat files across different tenants.
Users can upgrade to FastGPT version 4.15.0-beta5, which addresses this vulnerability by requiring a proper INVOKE_TOKEN_SECRET configuration. Instructions for updating are available in the FastGPT release notes.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Jul 15, 2026CISA-ADP
Assessed Jul 15, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/labring/FastGPT/security/advisories/GHSA-w732-rq8c-chc8 | CISA-ADP | AdvisoryExploitRemedyVendor |
| https://github.com/labring/FastGPT/commit/f5f1e58b25571b7107ca49d9bf96bb2b0e0a620a | [email protected] | Source CodeVendor |
| https://github.com/labring/FastGPT/pull/7170 | [email protected] | Source CodeVendor |
| https://github.com/labring/FastGPT/releases/tag/v4.15.0-beta5 | [email protected] | Release NotesVendor |
| https://github.com/labring/FastGPT/security/advisories/GHSA-w732-rq8c-chc8 | [email protected] | AdvisoryExploitRemedyVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-798 | Use of Hard-coded Credentials | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| labring FastGPT | <= 4.15.0 (semver) |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 15, 2026 | CVE Modified | CISA-ADP |
| Jul 15, 2026 | New CVE Received | [email protected] |