CVE-2026-44286

FastGPT is an AI Agent building platform. Prior to version 4.14.17, an unauthenticated Server-Side Request Forgery (SSRF) vulnerability allows attackers (or authenticated users with App editing privileges) to send arbitrary HTTP requests to internal/private network addresses. The fetchData function in the lafModule workflow node uses axios to fetch user-controlled URLs without validating them against the application's internal network blocklist guard (isInternalAddress), bypassing SSRF protections. This issue has been patched in version 4.14.17.

• CWE-918

• https://github.com/labring/FastGPT/releases/tag/v4.14.17
• https://github.com/labring/FastGPT/security/advisories/GHSA-xpx6-xcpf-76qg
• https://github.com/labring/FastGPT/security/advisories/GHSA-xpx6-xcpf-76qg

Published

May 8, 2026

Last Modified

Jul 24, 2026

Status

Deferred

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-4428A logic error in CRL distribution point validation in AWS-LC…9.1
• CVE-2026-44281GLPI is a free asset and IT management software package. Sta…7
• CVE-2026-44282Decidim is a participatory democracy framework. Prior to 0.3…4.8
• CVE-2026-44283etcd is a distributed key-value store for the data of a dist…4.3
• CVE-2026-44284FastGPT is an AI Agent building platform. Prior to version 4…6.3
• CVE-2026-44285FastGPT is an AI Agent building platform. Prior to 4.15.0-be…7.7
• CVE-2026-44287FastGPT is an AI Agent building platform. Prior to 4.15.0-be…6.3
• CVE-2026-44288protobufjs compiles protobuf definitions into JavaScript (JS…5.3
• CVE-2026-44289protobufjs compiles protobuf definitions into JavaScript (JS…7.5
• CVE-2026-4429The OSM – OpenStreetMap plugin for WordPress is vulnerable t…6.4
• CVE-2026-44290protobufjs compiles protobuf definitions into JavaScript (JS…7.5
• CVE-2026-44291protobufjs compiles protobuf definitions into JavaScript (JS…8.1