CVE-2026-61643

{
  "id": "CVE-2026-61643",
  "sourceIdentifier": "[email protected]",
  "published": "2026-07-15T18:16:49.510",
  "lastModified": "2026-10-24T21:10:00.130",
  "vulnStatus": "Deferred",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "FastGPT is a knowledge-based AI application platform. From 4.14.17 until 4.15.0-beta5, an authenticated FastGPT user can save a workflow node that points to another user's private HTTP toolset by using a crafted saved tool id such as http-<victim_toolset_app_id>/<tool_name>. The normal toolset routes deny access, but the workflow save and runtime path did not apply the same authorization check to the referenced toolset, allowing /api/v2/chat/completions to resolve the saved reference and execute the victim-owned HTTP tool. This issue is fixed in version 4.15.0-beta5."
    },
    {
      "lang": "es",
      "value": "FastGPT es una plataforma de aplicación de IA basada en conocimiento. Desde la versión 4.14.17 hasta la 4.15.0-beta5, un usuario autenticado de FastGPT puede guardar un nodo de flujo de trabajo que apunta al conjunto de herramientas HTTP privado de otro usuario utilizando un ID de herramienta guardado manipulado, como http-[victim_toolset_app_id]/[tool_name]. Las rutas normales del conjunto de herramientas deniegan el acceso, pero la ruta de guardado y tiempo de ejecución del flujo de trabajo no aplicó la misma comprobación de autorización al conjunto de herramientas referenciado, permitiendo que /API/v2/chat/completions resolviera la referencia guardada y ejecutara la herramienta HTTP propiedad de la víctima. Este problema está solucionado en la versión 4.15.0-beta5."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "labring",
          "product": "FastGPT",
          "versions": [
            {
              "version": ">= 4.14.17, < 4.15.0-beta5",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:N",
          "baseScore": 5.9,
          "baseSeverity": "MEDIUM",
          "attackVector": "NETWORK",
          "attackComplexity": "HIGH",
          "privilegesRequired": "LOW",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "LOW",
          "integrityImpact": "HIGH",
          "availabilityImpact": "NONE"
        },
        "exploitabilityScore": 1.6,
        "impactScore": 4.2
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-07-20T14:31:52.902899Z",
          "id": "CVE-2026-61643",
          "options": [
            {
              "exploitation": "poc"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-863"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://github.com/labring/FastGPT/releases/tag/v4.15.0-beta5",
      "source": "[email protected]"
    },
    {
      "url": "https://github.com/labring/FastGPT/security/advisories/GHSA-93r3-wqq3-c5ch",
      "source": "[email protected]"
    },
    {
      "url": "https://github.com/labring/FastGPT/security/advisories/GHSA-93r3-wqq3-c5ch",
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
    }
  ]
}