CVE-2025-49131

FastGPT is an open-source project that provides a platform for building, deploying, and operating AI-driven workflows and conversational agents. The Sandbox container (fastgpt-sandbox) is a specialized, isolated environment used by FastGPT to safely execute user-submitted or dynamically generated code in isolation. The sandbox before version 4.9.11 has insufficient isolation and inadequate restrictions on code execution by allowing overly permissive syscalls, which allows attackers to escape the intended sandbox boundaries. Attackers could exploit this to read and overwrite arbitrary files and bypass Python module import restrictions. This is patched in version 4.9.11 by restricting the allowed system calls to a safer subset and additional descriptive error messaging.

• CWE-732

• https://github.com/labring/FastGPT/commit/bb810a43a1c70683fab7f5fe993771e930a94426Patch
• https://github.com/labring/FastGPT/pkgs/container/fastgpt-sandboxProduct
• https://github.com/labring/FastGPT/pull/4958Issue Tracking
• https://github.com/labring/FastGPT/releases/tag/v4.9.11Release Notes
• https://github.com/labring/FastGPT/security/advisories/GHSA-f3pf-r3g7-g895Vendor Advisory

Published

Jun 9, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-49125Authentication Bypass Using an Alternate Path or Channel vul…7.5
• CVE-2025-49126Visionatrix is an AI Media processing tool using ComfyUI. In…8.8
• CVE-2025-49127Kafbat UI is a web user interface for managing Apache Kafka …8.9
• CVE-2025-49128Jackson-core contains core low-level incremental ("streaming…4
• CVE-2025-4913A vulnerability was found in PHPGurukul Auto Taxi Stand Mana…9.8
• CVE-2025-49130Laravel Translation Manager is a package to manage Laravel t…6
• CVE-2025-49132Pterodactyl is a free, open-source game server management pa…10
• CVE-2025-49133Libtpms is a library that targets the integration of TPM fun…5.5
• CVE-2025-49134Weblate is a web based localization tool. Prior to version 5…5.3
• CVE-2025-49135CVAT is an open source interactive video and image annotatio…6.5
• CVE-2025-49136listmonk is a standalone, self-hosted, newsletter and mailin…6.5
• CVE-2025-49137HAX CMS PHP allows users to manage their microsite universe …6.1