What’s Vulnerable › Products

lm-sys/fastchat vulnerabilities

10 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 10 published in the last 12 months.

Check whether your lm-sys/fastchat version is affected

Latest lm-sys/fastchat vulnerabilities

• CVE-2026-85695 — FastChat Unauthenticated Worker Registration SSRF and Model Spoofing (CVSS 9.4)
• CVE-2026-6608 — lm-sys fastchat Arena Side-by-Side View add_text control flow (CVSS 5.3)
• CVE-2026-6607 — lm-sys fastchat Worker API Endpoint api_generate resource consumption (CVSS 5.3)
• CVE-2025-3677 — lm-sys fastchat apply_delta.py apply_delta_low_cpu_mem deserialization (CVSS 5.3)
• CVE-2024-12376 — Server Side Request Forgery in lm-sys/fastchat (CVSS 7.5)
• CVE-2024-11603 — Server-Side Request Forgery in lm-sys/fastchat (CVSS 7.5)
• CVE-2024-10912 — Denial of Service in lm-sys/fastchat (CVSS 7.5)
• CVE-2024-10908 — Open Redirect in lm-sys/fastchat (CVSS 6.1)
• CVE-2024-10907 — Denial of Service (DoS) via Multipart Boundary in lm-sys/fastchat (CVSS 7.5)
• CVE-2024-10044 — SSRF in POST /worker_generate_stream API endpoint in lm-sys/fastchat (CVSS 9.3)