BaseFortify

Publication date: 2025-10-22

Last updated on: 2025-12-29

Assigner: GitHub, Inc.

Description

FastGPT is an AI Agent building platform. Prior to version 4.11.1, in the workflow file reading node, the network link is not security-verified, posing a risk of SSRF attacks. This issue has been patched in version 4.11.1.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-10-22

Last Modified

2025-12-29

Generated

2026-07-06

AI Q&A

2025-10-23

EPSS Evaluated

2026-07-05

NVD

CVE-2025-62612

Affected Vendors & Products

Vendor	Product	Version / Range
fastgpt	fastgpt	to 4.11.1 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-918	The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

Attack-Flow Graph

Mitigation Strategies

Upgrade FastGPT to version 4.11.1 or later, as this version includes a patch that verifies network links in the workflow file reading node to prevent SSRF attacks.

Impact Analysis

The vulnerability can allow attackers to exploit the system by making unauthorized network requests through the vulnerable FastGPT workflow node. This can lead to unauthorized access to internal systems, data exposure, or further attacks within the network.

Executive Summary

This vulnerability in FastGPT prior to version 4.11.1 involves the workflow file reading node not verifying the security of network links, which allows for Server-Side Request Forgery (SSRF) attacks. SSRF attacks enable an attacker to make unauthorized requests from the vulnerable server to internal or external systems.

Hi! I’m here to help you understand CVE-2025-62612. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70