Executive brief
FastGPT Community Edition is an AI platform that stores and retrieves chat conversations. Versions 4.10.0 through 4.14.0 contain a NoSQL injection flaw in the chat history retrieval endpoint that allows unauthenticated attackers to bypass security checks and view the chat history titles of all users on the platform, potentially exposing sensitive conversation topics and personal information.
Technical details
The vulnerability is a NoSQL injection (CWE-943) in the POST /api/core/chat/getHistories endpoint caused by improper input validation in the authOutLinkInit() function. An unauthenticated attacker can inject NoSQL operators such as $ne, $regex, and $gt via crafted JSON payloads to bypass the outLink permission check. This allows unauthorized access to chat history titles across all users. The vulnerability affects versions 4.10.0 through 4.14.0; a patch is available in version 4.15.0 and later.
Affected products
- FastGPT FastGPT Community Edition 4.10.0 through 4.14.0
Timeline
- 2026-08-31: disclosed
- 2026-08-31: patched: Patch available in version 4.15.0 and later