CVE-2026-61646: FastGPT < 4.15.0-beta5

Affected technology

FastGPT · < 4.15.0-beta5
labring

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Network (remote) · Low privileges required · No user interaction required

What an attacker can do

An authenticated workflow user can configure an HTTP request node to call an attacker-controlled public URL that redirects to cloud metadata, loopback, or internal services that the guard would block on direct request, and the HTTP node returns the response body to the workflow caller. Vendor/CNA’s CVSS 4.0 assessment (base score 6.3/10) rates confidentiality, integrity and availability impact as none.