Description (CNA)
FastGPT is an AI Agent building platform. Prior to version 4.11.1, in the workflow file reading node, the network link is not security-verified, posing a risk of SSRF attacks. This issue has been patched in version 4.11.1.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| labring / FastGPT | affected < 4.11.1 |
CWE
CWE-918
References
ADP enrichment
No English description supplied.
No references supplied.