Executive brief
FastapiAdmin is an administrative dashboard framework. A security flaw in its AI assistant chat feature allows attackers to send messages containing malicious code. If another user or administrator views these messages, the code can execute in their browser, potentially allowing the attacker to steal login sessions or perform unauthorized actions.
Technical details
A stored Cross-Site Scripting (XSS) vulnerability exists in FastapiAdmin versions up to and including 2.2.0. The vulnerability is located in the AI assistant chat functionality, specifically within the MessageItem.vue and MarkdownRenderer components. User-supplied chat content is processed using the 'markdown-it' library and rendered via the 'v-html' directive without proper sanitization. An authenticated attacker can inject malicious HTML or JavaScript payloads into chat messages. When these messages are viewed by other users or administrators in the chat interface or message management console, the payload executes in the context of the victim's browser session. Recommended fixes include integrating a sanitization library like DOMPurify.
Affected products
- FastapiAdmin FastapiAdmin <= 2.2.0
Timeline
- 2026-06-09: disclosed: Vulnerability details published on GitHub and NVD