← volver
CVE-2025-27600

FastGPT SSRF

CVSS 6.9 MEDIUMEPSS 0.3%CWE-918
FastGPT is a knowledge-based platform built on the LLMs. Since the web crawling plug-in does not perform intranet IP verification, an attacker can initiate an intranet IP request, causing the system to initiate a request through the intranet and potentially obtain some private data on the intranet. This issue is fixed in 4.9.0.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
Productos afectados
labring · FastGPT

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →