CVE-2026-40352

Katalog CVE

CVSS 8.8 · High EPSS 0,53%

Kerentanan Improper Neutralization of Special Elements in Data Query Logic pada fastgpt. Skor CVSS 3.1 8.8 (High) menurut github.com.

Deskripsi (NVD)

FastGPT is an AI Agent building platform. In versions prior to 4.14.9.5, the password change endpoint is vulnerable to NoSQL injection. An authenticated attacker can bypass the "old password" verification by injecting MongoDB query operators. This allows an attacker who has gained a low-privileged session to change the password of their account (or others if combined with ID manipulation) without knowing the current one, leading to full account takeover and persistence. This issue has been fixed in version 4.14.9.5.

Rincian

Terbit di NVD

17 April 2026

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

8.8 (High), sumber github.com
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-943: Improper Neutralization of Special Elements in Data Query Logic

EPSS (30 hari)

0,53% peluang dieksploitasi; lebih tinggi dari 43,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/labring/FastGPT/security/advisories/GHSA-422w-vrfj-72g6 exploit · advisory vendor
• https://github.com/labring/FastGPT/commit/bd966d479fbe414d02679cf79f9eaaab3d100a2d patch
• https://github.com/labring/FastGPT/releases/tag/v4.14.9.5 product · release notes