CVE-2026-50562

5th percentile - higher than 5% of all known CVEs

In FastGPT up to commit 22ebfacbb43311e9b73294040ae0eb87390c6bba, artifacts built from untrusted pull request code in GitHub Actions workflows can be downloaded by privileged workflow_run jobs, allowing an attacker to push controlled Docker images to GHCR and, for documentation previews, deploy with the secret KUBE_CONFIG_CN.

The risk involves potential takeover of containers and deployment of malicious images in production or staging environments, which could lead to data leakage, privilege escalation, or further infrastructure attacks.

Immediately update FastGPT to a version after commit 22ebfacbb43311e9b73294040ae0eb87390c6bba and review and secure GitHub Actions workflows to prevent access to artifacts from untrusted pull requests.