CVE-2026-54607
HighCVSS 7.7Exploitation Probability (EPSS)
Low risk15th percentile - higher than 15% of all known CVEs
Summary
In FastGPT prior to version 4.15.0-beta4, the HTTP-tool OpenAPI schema importer validates only the top-level URL before passing it to SwaggerParser.bundle, whose remote reference resolver fetches $ref URLs without FastGPT's internal-address guard and returns fetched content inline, allowing an authenticated team member to read internal services or cloud metadata.
Risk Assessment
The risk involves potential leakage of sensitive data from internal services or cloud metadata, which could lead to privilege escalation or further attacks on the infrastructure.
Recommendation
Immediately upgrade FastGPT to version 4.15.0-beta4 or later, which contains the fix for this vulnerability.
Original NVD description (English source)
FastGPT is a knowledge-based AI application platform. Prior to 4.15.0-beta4, the HTTP-tool OpenAPI schema importer validates only the top-level URL before passing it to SwaggerParser.bundle, whose remote reference resolver fetches $ref URLs without FastGPT's internal-address guard and returns fetched content inline, allowing an authenticated team member to read internal services or cloud metadata. This issue is fixed in version 4.15.0-beta4.