CVE-2026-61644
Deferred Deferred - Pending Action

Information Disclosure in FastGPT

Publication date: 2026-07-15

Last updated on: 2026-07-15

Assigner: GitHub, Inc.

Description
FastGPT is a knowledge-based AI application platform. From 4.14.17 until 4.15.0-beta5, the POST /api/core/chat/record/getCollectionQuote endpoint authenticates the caller's chat and collection context, but the initialId center-node lookup is not bound to that authorized context. A low-privileged tenant user can call the endpoint with valid attacker-owned appId, chatId, chatItemDataId, and collectionId values while supplying another tenant's dataset data id as initialId, causing the response to include foreign dataset quote or full-text content. This issue is fixed in version 4.15.0-beta5.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-15
Last Modified
2026-07-15
Generated
2026-08-04
AI Q&A
2026-07-15
EPSS Evaluated
2026-08-03
NVD
CVE-2026-61644
EUVD
EUVD-2026-44677

Affected Vendors & Products

Showing 8 associated CPEs
Vendor Product Version / Range
labring fastgpt 4.14.17
labring fastgpt 4.14.18
labring fastgpt 4.14.19
labring fastgpt 4.14.20
labring fastgpt 4.14.21
labring fastgpt 4.14.22
labring fastgpt 4.14.23
labring fastgpt 4.15.0-beta5

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-863 The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in FastGPT (versions 4.14.17 to 4.15.0-beta5) allows authenticated users to access data from other tenants. The issue occurs in the /api/core/chat/record/getCollectionQuote endpoint, where the system fails to properly restrict access to dataset content based on tenant authorization. An attacker can manipulate parameters to retrieve sensitive data from another tenant's dataset.

Detection Guidance

To detect this vulnerability, check FastGPT versions between 4.14.17 and 4.15.0-beta5. Inspect API logs for unusual requests to /api/core/chat/record/getCollectionQuote with mismatched appId, chatId, or collectionId parameters. Monitor for unauthorized data access patterns in tenant datasets.

Impact Analysis

This vulnerability allows unauthorized access to sensitive data across tenant boundaries. Attackers with a valid account can steal dataset content, quotes, or full-text information belonging to other users or organizations. This could lead to data breaches, intellectual property theft, or compliance violations depending on the nature of the exposed data.

Compliance Impact

This vulnerability likely violates data protection regulations like GDPR and HIPAA by enabling unauthorized access to personal or sensitive data across tenant boundaries. Organizations using affected FastGPT versions may face compliance violations, regulatory fines, and reputational damage due to potential data exposure.

Mitigation Strategies

Upgrade FastGPT to version 4.15.0-beta5 or later. Review and restrict access to the /api/core/chat/record/getCollectionQuote endpoint. Implement strict input validation for initialId, appId, chatId, and collectionId parameters. Monitor for suspicious API activity.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-61644. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart