Low severity · published May 8, 2026
CVE-2026-44286
FastGPT: SSRF Vulnerability in Laf Workflow Node via Missing Internal Address Validation
2.3
CVSS
0.2%
EPSS
No
On KEV
Description
FastGPT is an AI Agent building platform. Prior to version 4.14.17, an unauthenticated Server-Side Request Forgery (SSRF) vulnerability allows attackers (or authenticated users with App editing privileges) to send arbitrary HTTP requests to internal/private network addresses. The fetchData function in the lafModule workflow node uses axios to fetch user-controlled URLs without validating them against the application's internal network blocklist guard (isInternalAddress), bypassing SSRF protections. This issue has been patched in version 4.14.17.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 14% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FA
FastGPT · labring
< 4.14.17 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-44286
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-44286
github.com
https://github.com/labring/FastGPT/releases/tag/v4.14.17
github.com
https://github.com/labring/FastGPT/security/advisories/GHSA-xpx6-xcpf-76qg
More from FastGPT
10.0
CVE-2026-34162
FastGPT: Unauthenticated SSRF via httpTools Endpoint Leads to Internal API Key Theft
9.9
CVE-2025-49131
FastGPT Sandbox Vulnerable to Sandbox Bypass
9.8
CVE-2026-42302
FastGPT: Unauthenticated Remote Code Execution (RCE) via code-server Misconfiguration in agent-sandbox
9.8
CVE-2026-40351
FastGPT: NoSQL Injection in loginByPassword leads to Authentication Bypass
9.3
CVE-2026-68929
FastGPT: Unauthenticated WeChat channel hijack and denial of service via shareId-only authorization