CVE-2026-40100

published 2026-04-10

CVE-2026-40100: FastGPT is an AI Agent building platform. Prior to 4.14.10.3, the /api/core/app/mcpTools/runTool endpoint accepts arbitrary URLs without authentication. The…

Priority P3 37 medium 5.3 CVSS 3.1

AV N AC L PR N UI N S U C L I N A N

FastGPT is an AI Agent building platform. Prior to 4.14.10.3, the /api/core/app/mcpTools/runTool endpoint accepts arbitrary URLs without authentication. The internal IP check in isInternalAddress() only blocks private IPs when CHECK_INTERNAL_IP=true, which is not the default. This allows unauthenticated attackers to perform SSRF against internal network resources. This vulnerability is fixed in 4.14.10.3.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
fastgpt	fastgpt	< 4.14.10.3	4.14.10.3
labring	fastgpt	< 4.14.10.3	4.14.10.3

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-918