CVE-2025-62612
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2025-10-22

Last updated on: 2025-12-29

Assigner: GitHub, Inc.

Description
FastGPT is an AI Agent building platform. Prior to version 4.11.1, in the workflow file reading node, the network link is not security-verified, posing a risk of SSRF attacks. This issue has been patched in version 4.11.1.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-10-22
Last Modified
2025-12-29
Generated
2026-06-16
AI Q&A
2025-10-23
EPSS Evaluated
2026-06-15
NVD
CVE-2025-62612
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
fastgpt fastgpt to 4.11.1 (exc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-918 The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Mitigation Strategies

Upgrade FastGPT to version 4.11.1 or later, as this version includes a patch that verifies network links in the workflow file reading node to prevent SSRF attacks.

Impact Analysis

The vulnerability can allow attackers to exploit the system by making unauthorized network requests through the vulnerable FastGPT workflow node. This can lead to unauthorized access to internal systems, data exposure, or further attacks within the network.

Executive Summary

This vulnerability in FastGPT prior to version 4.11.1 involves the workflow file reading node not verifying the security of network links, which allows for Server-Side Request Forgery (SSRF) attacks. SSRF attacks enable an attacker to make unauthorized requests from the vulnerable server to internal or external systems.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-62612. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart