CVE-2026-50562
Deferred Deferred - Pending Action

Arbitrary Code Execution in FastGPT Workflow Artifacts

Publication date: 2026-07-15

Last updated on: 2026-07-15

Assigner: GitHub, Inc.

Description
FastGPT is a knowledge-based AI application platform. At commit 22ebfacbb43311e9b73294040ae0eb87390c6bba and earlier, artifacts built from untrusted pull request code in .github/workflows/preview-docs-build.yml and .github/workflows/preview-fastgpt-build.yml can be downloaded by privileged workflow_run jobs in .github/workflows/preview-docs-push.yml and .github/workflows/preview-fastgpt-push.yml, allowing attacker-controlled Docker images from the document/ tree or FastGPT build context to be pushed to GHCR and, for documentation previews, deployed with secrets.KUBE_CONFIG_CN.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-15
Last Modified
2026-07-15
Generated
2026-08-05
AI Q&A
2026-07-15
EPSS Evaluated
2026-08-03
NVD
CVE-2026-50562
EUVD
EUVD-2026-44749

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
labring fastgpt *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-829 The product imports, requires, or includes executable functionality (such as a library) from a source that is outside of the intended control sphere.
CWE-494 The product downloads source code or an executable from a remote location and executes the code without sufficiently verifying the origin and integrity of the code.
CWE-266 A product incorrectly assigns a privilege to a particular actor, creating an unintended sphere of control for that actor.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-50562 is a vulnerability in FastGPT's GitHub Actions CI/CD workflows where untrusted pull request code builds Docker images that are then processed by privileged workflows. These privileged workflows download artifacts from untrusted PR builds and push images to GitHub Container Registry (GHCR) or deploy to Kubernetes using credentials like KUBE_CONFIG_CN.

Detection Guidance

Check GitHub Actions workflows for untrusted PR artifacts being processed by privileged workflows. Look for workflows using artifacts from pull requests in .github/workflows/preview-docs-build.yml, .github/workflows/preview-fastgpt-build.yml, .github/workflows/preview-docs-push.yml, and .github/workflows/preview-fastgpt-push.yml. Review registry pushes to GHCR and Kubernetes deployments using secrets like KUBE_CONFIG_CN.

Impact Analysis

An attacker could build malicious Docker images from untrusted PR code and push them to GHCR or deploy them to Kubernetes environments. This could lead to unauthorized access, data breaches, or malicious code execution in your infrastructure.

Compliance Impact

This vulnerability could lead to unauthorized data access or exposure, violating GDPR's data protection requirements or HIPAA's security rules. Unauthorized deployments may also compromise audit logs and compliance tracking.

Mitigation Strategies

Disable privileged workflows from processing untrusted PR artifacts. Add validation to ensure only trusted code builds are promoted. Restrict registry push and Kubernetes deployment permissions to minimal required scopes. Rebuild deployable images from trusted code in privileged workflows instead of using PR artifacts.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-50562. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart