CVE-2026-44284

FastGPT is an AI Agent building platform. Prior to version 4.14.17, FastGPT had an inconsistent SSRF protection gap in MCP tool URL handling. The direct MCP preview/run endpoints already rejected internal/private network URLs, but the MCP tool create/update endpoints could still save an internal MCP server URL. That stored URL could later be used by workflow execution without revalidating the destination. An authenticated user with permission to create or manage MCP toolsets could store an internal endpoint such as http://localhost:3000/mcp and later cause the FastGPT backend workflow runner to connect to that internal destination. This issue has been patched in version 4.14.17.

• CWE-918

• https://github.com/labring/FastGPT/commit/c1c6b9520d976d25ed945b5bc4e0768149e6db69
• https://github.com/labring/FastGPT/pull/6826
• https://github.com/labring/FastGPT/releases/tag/v4.14.17
• https://github.com/labring/FastGPT/security/advisories/GHSA-cxxj-99f7-f5wq
• https://github.com/labring/FastGPT/pull/6826
• https://github.com/labring/FastGPT/security/advisories/GHSA-cxxj-99f7-f5wq

Published

May 8, 2026

Last Modified

Jul 24, 2026

Status

Deferred

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-44277A improper access control vulnerability in Fortinet FortiAut…9.8
• CVE-2026-44278A use of hard-coded cryptographic key vulnerability in Forti…5.5
• CVE-2026-44279An improper export of android application components vulnera…5.5
• CVE-2026-4428A logic error in CRL distribution point validation in AWS-LC…9.1
• CVE-2026-44281GLPI is a free asset and IT management software package. Sta…7
• CVE-2026-44283etcd is a distributed key-value store for the data of a dist…4.3
• CVE-2026-44285FastGPT is an AI Agent building platform. Prior to 4.15.0-be…7.7
• CVE-2026-44286FastGPT is an AI Agent building platform. Prior to version 4…2.3
• CVE-2026-44287FastGPT is an AI Agent building platform. Prior to 4.15.0-be…6.3
• CVE-2026-44288protobufjs compiles protobuf definitions into JavaScript (JS…5.3
• CVE-2026-44289protobufjs compiles protobuf definitions into JavaScript (JS…7.5
• CVE-2026-4429The OSM – OpenStreetMap plugin for WordPress is vulnerable t…6.4