VYPR

FastGPT

by GitHub

CVEs (1)

  • CVE-2026-42344MedMay 8, 2026
    risk 0.34cvss 6.3epss 0.00

    FastGPT is an AI Agent building platform. In versions 4.14.11 and prior, FastGPT's isInternalAddress() function in packages/service/common/system/utils.ts is vulnerable to DNS rebinding (TOCTOU — Time-of-Check to Time-of-Use). The function resolves the hostname via…