CVE-2026-34162
CriticalCVSS 10.0Exploitation Probability (EPSS)
Low risk34th percentile - higher than 34% of all known CVEs
Summary
FastGPT before version 4.14.9.5 exposes the /api/core/app/httpTools/runTool endpoint without authentication. It acts as a full HTTP proxy, allowing attackers to make arbitrary HTTP requests from the server.
Risk Assessment
Attackers can use the server as a proxy to attack other systems, scan internal networks, or steal data.
Recommendation
Update FastGPT to version 4.14.9.5. Restrict access to the /api/core/app/httpTools/runTool endpoint.
Original NVD description (English source)
FastGPT is an AI Agent building platform. Prior to version 4.14.9.5, the FastGPT HTTP tools testing endpoint (/api/core/app/httpTools/runTool) is exposed without any authentication. This endpoint acts as a full HTTP proxy — it accepts a user-supplied baseUrl, toolPath, HTTP method, custom headers, and body, then makes a server-side HTTP request and returns the complete response to the caller. This issue has been patched in version 4.14.9.5.