Beveiligingsadvies

CVE-2026-79483

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-08-31 00:00:00

Laatst bijgewerkt 2026-09-01 14:58:13

Toegewezen door mitre

CVSS-score 5.3

Status PUBLISHED

Beschrijving

FastGPT Community Edition 4.10.0 through 4.14.0 are vulnerable to a NoSQL injection in the POST /api/core/chat/getHistories endpoint. An unauthenticated attacker can inject malicious NoSQL operators via crafted JSON payloads to bypass authorization checks, resulting in unauthorized access to chat history titles of all users across the platform.

← Alle CVE's bekijken Bekijk op cve.org ↗