FastGPT CVE-2026-44286

Q: What is the CVSS score of CVE-2026-44286?

CVE-2026-44286 has a CVSS 4.0 base score of 2.3 (Low). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

LOW

Server-Side Request Forgery (SSRF) (CWE-918)

2026-05-08 GitHub_M

SSRF Fastgpt

2.3

CVSS 4.0 · Vendor: GitHub_M

Severity by source

Vendor (GitHub_M) PRIMARY

2.3 LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from Vendor (GitHub_M) · only source for this CVE.

CVSS VectorVendor: GitHub_M

CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Source Code Evidence Fetched

May 09, 2026 - 00:45 vuln.today

Analysis Generated

May 09, 2026 - 00:45 vuln.today

CVSS changed

May 08, 2026 - 23:22 NVD

2.3 (LOW)

CVE Published

May 08, 2026 - 22:17 nvd

UNKNOWN (no severity yet)

CVE Published

May 08, 2026 - 22:17 nvd

LOW 2.3

DescriptionCVE.org

FastGPT is an AI Agent building platform. Prior to version 4.14.17, an unauthenticated Server-Side Request Forgery (SSRF) vulnerability allows attackers (or authenticated users with App editing privileges) to send arbitrary HTTP requests to internal/private network addresses. The fetchData function in the lafModule workflow node uses axios to fetch user-controlled URLs without validating them against the application's internal network blocklist guard (isInternalAddress), bypassing SSRF protections. This issue has been patched in version 4.14.17.

AnalysisAI

Server-side request forgery (SSRF) in FastGPT prior to version 4.14.17 allows authenticated users with App editing privileges to bypass SSRF protections in the lafModule workflow node's fetchData function, enabling arbitrary HTTP requests to internal and private network addresses via unvalidated user-controlled URLs passed to axios without filtering against the application's isInternalAddress blocklist.

Technical ContextAI

FastGPT is an AI Agent building platform that uses a workflow node system for data processing. The lafModule workflow node contains a fetchData function that uses the axios HTTP client library to retrieve data from user-provided URLs. The vulnerability exists because the function fails to validate URLs against FastGPT's isInternalAddress blocklist guard, which is designed to prevent SSRF attacks by filtering requests to internal or private network ranges (typically RFC 1918 addresses, loopback, and metadata service endpoints). This represents a classic CWE-918 (Server-Side Request Forgery) flaw where user-controlled input (the URL parameter) is passed directly to an outbound HTTP request without proper validation, allowing attackers to enumerate internal services, access metadata endpoints, or interact with internal APIs.

RemediationAI

Upgrade FastGPT to version 4.14.17 or later immediately. For Docker deployments, update both the fastgpt-app and fastgpt-pro container image tags to v4.14.17 as specified in the vendor release notes. If immediate upgrade is not feasible, restrict App editing privileges to trusted administrators only and audit existing workflow nodes to identify and disable any lafModule nodes using the fetchData function with user-controlled URL inputs. The vendor advisory is available at https://github.com/labring/FastGPT/security/advisories/GHSA-xpx6-xcpf-76qg and the patched release at https://github.com/labring/FastGPT/releases/tag/v4.14.17.