CVE-2026-54601
MediumCVSS 6.3Exploitation Probability (EPSS)
Low risk16th percentile - higher than 16% of all known CVEs
Summary
A vulnerability in FastGPT allows an authenticated tenant user to call the POST /api/core/dataset/collection/create/reTrainingCollection endpoint in a way that persists a server-owned datasetId value from another tenant. This creates mixed dataset objects, and downstream endpoints make authorization decisions based on inconsistent ownership anchors, enabling cross-tenant read, update, and delete access when mixed object ids are known.
Risk Assessment
The organization is at risk of unauthorized access to other tenants' data, potentially leading to leakage of confidential information, data integrity violations, and unauthorized modifications to datasets and collections.
Recommendation
Immediately upgrade FastGPT to version 4.15.0-beta4 or later, which contains the fix for this vulnerability.
Original NVD description (English source)
FastGPT is an open source AI knowledge base platform. From 4.14.17 to before 4.15.0-beta4, FastGPT allows an authenticated tenant user to call POST /api/core/dataset/collection/create/reTrainingCollection in a way that persists a server-owned datasetId value from another tenant. This creates mixed dataset objects and downstream dataset, collection, and training endpoints then make authorization decisions from inconsistent ownership anchors, allowing cross-tenant read, update, and delete access when mixed object ids are known. This issue is fixed in version 4.15.0-beta4.