What’s Vulnerable › Vulnerabilities

CVE-2026-61644: FastGPT: /api/core/chat/record/getCollectionQuote can disclose cross-tenant dataset text due to an unbound initialId lookup

• Severity: high (CVSS 7.7 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-07-15 · updated 2026-10-24
• Weakness: CWE-863

Description

FastGPT is a knowledge-based AI application platform. From 4.14.17 until 4.15.0-beta5, the POST /api/core/chat/record/getCollectionQuote endpoint authenticates the caller's chat and collection context, but the initialId center-node lookup is not bound to that authorized context. A low-privileged tenant user can call the endpoint with valid attacker-owned appId, chatId, chatItemDataId, and collectionId values while supplying another tenant's dataset data id as initialId, causing the response to include foreign dataset quote or full-text content. This issue is fixed in version 4.15.0-beta5.

Affected products

• labring FastGPT: from 4.14.17, < 4.15.0-beta5

References

• https://github.com/labring/FastGPT/commit/0c1840c7773c5be5d777f86228651479e02155db
• https://github.com/labring/FastGPT/pull/7173
• https://github.com/labring/FastGPT/releases/tag/v4.15.0-beta5
• https://github.com/labring/FastGPT/security/advisories/GHSA-mmg6-2g54-j896
• https://github.com/labring/FastGPT/security/advisories/GHSA-mmg6-2g54-j896

Get alerted when CVE-2026-61644 or the next vulnerability affects your stack