{"id":"CVE-2026-34162","title":"FastGPT is an AI Agent building platform","summary":"FastGPT is an AI Agent building platform. Prior to version 4.14.9.5, the FastGPT HTTP tools testing endpoint (/api/core/app/httpTools/runTool) is exposed without any authentication. This endpoint acts as a full HTTP proxy — it accepts a …","severity":"critical","cvss":10,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L","cwe":["CWE-306","CWE-918"],"vendor":"fastgpt","product":"fastgpt","affected":["fastgpt < 4.14.9.5"],"patched":["fastgpt 4.14.9.5"],"published":"2026-03-31","updated":"2026-07-24","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-34162","references":[{"url":"https://github.com/labring/FastGPT/commit/bc7eae2ed61481a5e322208829be291faec58c00","label":"security-advisories@github.com"},{"url":"https://github.com/labring/FastGPT/pull/6640","label":"security-advisories@github.com"},{"url":"https://github.com/labring/FastGPT/releases/tag/v4.14.9.5","label":"security-advisories@github.com"},{"url":"https://github.com/labring/FastGPT/security/advisories/GHSA-w36r-f268-pwrj","label":"security-advisories@github.com"},{"url":"https://github.com/labring/FastGPT/security/advisories/GHSA-w36r-f268-pwrj","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"tags":["nvd"],"epss":0.00416,"epssPercentile":0.35468,"ingestedAt":"2026-07-24T21:39:13.276Z","slug":"CVE-2026-34162","body":"## Overview\n\nFastGPT is an AI Agent building platform. Prior to version 4.14.9.5, the FastGPT HTTP tools testing endpoint (/api/core/app/httpTools/runTool) is exposed without any authentication. This endpoint acts as a full HTTP proxy — it accepts a user-supplied baseUrl, toolPath, HTTP method, custom headers, and body, then makes a server-side HTTP request and returns the complete response to the caller. This issue has been patched in version 4.14.9.5.\n\n## Affected\n\n- `fastgpt < 4.14.9.5`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `fastgpt 4.14.9.5`","depth":"midnight","depthScore":55,"depthScoreParts":{"impact":55,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}