CVE-2026-54601

Published: Jul 7, 2026Modified: Jul 8, 2026Deferred

6.3

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Exploitability: 2.8 / Impact: 3.4

Source: security-advisories@github.com (Secondary)

Description

FastGPT is an open source AI knowledge base platform. From 4.14.17 to before 4.15.0-beta4, FastGPT allows an authenticated tenant user to call POST /api/core/dataset/collection/create/reTrainingCollection in a way that persists a server-owned datasetId value from another tenant. This creates mixed dataset objects and downstream dataset, collection, and training endpoints then make authorization decisions from inconsistent ownership anchors, allowing cross-tenant read, update, and delete access when mixed object ids are known. This issue is fixed in version 4.15.0-beta4.

Related CWEs

CWE-915

Improperly Controlled Modification of Dynamically-Determined Object Attributes

The product receives input from an upstream component that specifies multiple attributes, properties, or fields that are to be initialized or updated in an object, but it does not properly control which attributes can be modified.

References (5)

https://github.com/labring/FastGPT/commit/54a53e7d4399f1dfa2913394442c3cf6de672fb3

Source: security-advisories@github.com

https://github.com/labring/FastGPT/pull/7071

Source: security-advisories@github.com

https://github.com/labring/FastGPT/releases/tag/v4.15.0-beta4

Source: security-advisories@github.com

https://github.com/labring/FastGPT/security/advisories/GHSA-qxcq-48gr-93pj

Source: security-advisories@github.com

https://github.com/labring/FastGPT/security/advisories/GHSA-qxcq-48gr-93pj

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

Timeline

No history available yet.