EUVD-2026-17445Severity by source
AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L
Primary rating from GitHub Advisory · only source for this CVE.
CVSS VectorGitHub Advisory
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L
Lifecycle Timeline
6DescriptionGitHub Advisory
FastGPT is an AI Agent building platform. Prior to version 4.14.9.5, the FastGPT HTTP tools testing endpoint (/api/core/app/httpTools/runTool) is exposed without any authentication. This endpoint acts as a full HTTP proxy - it accepts a user-supplied baseUrl, toolPath, HTTP method, custom headers, and body, then makes a server-side HTTP request and returns the complete response to the caller. This issue has been patched in version 4.14.9.5.
AnalysisAI
Unauthenticated HTTP proxy abuse in FastGPT (AI Agent platform) prior to v4.14.9.5 allows remote attackers to relay arbitrary HTTP requests through the server. The /api/core/app/httpTools/runTool endpoint accepts user-controlled URLs, methods, headers, and body parameters without authentication, functioning as an open proxy for network pivoting, credential theft, and internal network reconnaissance. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | No special conditions — remote unauthenticated exploitation against FastGPT versions prior to 4.14.9.5. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | This represents critical real-world risk despite no confirmed active exploitation. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An external attacker discovers a FastGPT instance and crafts a POST request to /api/core/app/httpTools/runTool with a baseUrl pointing to the AWS EC2 metadata service (http://169.254.169.254/latest/meta-data/iam/security-credentials/). The FastGPT server executes this request server-side and returns IAM temporary credentials to the attacker, who then uses these credentials to access the victim's AWS resources, exfiltrate S3 data, or pivot to other cloud services. … |
| Remediation | Upgrade immediately to FastGPT version 4.14.9.5 or later, released by Labring to address this critical authentication bypass. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours: Identify all FastGPT instances and verify versions (confirm if running <4.14.9.5). …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Share
External POC / Exploit Code
Leaving vuln.today