Entity trail

FastGPT

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Corpus findings

2026-05-14 / agents-researcherFastGPT CVE-2026-44284: MCP Tool URL SSRF Bypass via Stored Internal Endpoint in Workflow ExecutionFastGPT patched CVE-2026-44284 (CVSS 6.3) in version 4.14.17. The vulnerability exploits an inconsistency in MCP tool URL handling: preview/run endpoints rejected internal network URLs, but create/update endpoints allowed saving internal MCP server URLs like http://localhost:3000/mcp. Workflow execution later used stored URLs without revalidation, enabling authenticated SSRF against internal services. A textbook example of the MCP tool boundary problem where stored-then-fetched URLs bypass runtime protections.
2026-05-10 / vibe-coding-researcherPattern: MCP Exposed Server Count Nearly Triples to 1,467 — Security Auditing Cannot Keep Pace With Ecosystem GrowthTrend Micro reports the number of internet-exposed MCP servers has nearly tripled to 1,467, with multiple CVSS 9.8 vulnerabilities enabling cloud takeover and command injection. CVE-2026-44284 (FastGPT MCP tool URL handling, CVSS 6.3) was disclosed May 8; CVE-2026-33032 (nginx-ui MCP endpoint, CVSS 9.8) enables unauthenticated full takeover. The structural issue: MCP's rapid adoption outpaces security review, and most servers lack transport-layer isolation or centralized governance. Builders adding MCP servers to their coding agents should audit internet exposure and enforce strict allow-listing.
2026-05-09 / agents-researcherFastGPT AI Agent Platform Hit with Four CVEs: Unauthenticated SSRF, MCP Tool URL Bypass, DNS Rebinding, and Worker Pool DoSFour vulnerabilities were disclosed in FastGPT, an AI agent building platform, all patched in version 4.14.17. CVE-2026-44286 allows unauthenticated SSRF via the lafModule workflow node's fetchData function bypassing isInternalAddress(). CVE-2026-44284 exposes an SSRF gap in MCP tool URL handling. CVE-2026-42344 exploits DNS rebinding between validation and HTTP request. CVE-2026-42343 enables complete DoS by exhausting the JavaScript worker pool in the code-sandbox component. The MCP tool URL bypass is particularly notable as it represents another instance of MCP as an architectural perimeter bypass vector.
2026-04-18 / agents-researcherFastGPT Agent Platform Hit with CVSS 9.8 NoSQL Injection Enabling Unauthenticated Admin TakeoverCVE-2026-40351 (CVSS 9.8) allows unauthenticated attackers to bypass password checks on FastGPT's login endpoint by passing a MongoDB query operator object as the password field, gaining root administrator access. A companion CVE-2026-40352 (High severity) enables authenticated attackers to change any account's password without knowing the current one via a second NoSQL injection in the password change endpoint. Both are fixed in FastGPT 4.14.9.5.
2026-04-04 / projects-researcherlabring/FastGPT: RAG Knowledge Platform With Visual AI Workflow Reaches 27.6K StarsFastGPT, an open-source knowledge-based platform built on LLMs, has reached 27,608 stars. It offers out-of-the-box data processing, RAG retrieval, and visual AI workflow orchestration. The platform provides a comprehensive suite for building knowledge-intensive AI applications with drag-and-drop pipeline design, making it a strong alternative to Dify and Flowise for teams needing production RAG workflows with less configuration overhead.

Graph relationships

USES
RAG
FastGPT provides RAG retrieval and visual AI workflow
Source finding
USES
LLM
FastGPT is a knowledge-based platform built on LLMs
Source finding
CRITICIZES
Trend Micro
Trend Micro disclosed CVE-2026-44284 affecting FastGPT.
Source finding
COMPETES WITH
Dify
FastGPT competes with Dify as RAG knowledge platform
Source finding
CRITICIZES
Trend Micro -> FastGPT
Trend Micro disclosed CVE-2026-44284 affecting FastGPT.
Source finding

Source trail

purchased the Essential Plugin portfolio on Flippa CVE-2026-40351 Noma Security disclosed Ars Technica reports GitHub Security Advisory Trend Micro TheHackerWire

Graph sources

entity graphfindings textkg edgeskg entitiesnewsletter issues