CVE-2026-33075: FastGPT has Arbitrary Code Execution in GitHub Actions via pull_request_target in fastgpt-preview-image.yml
FastGPT is an AI Agent building platform. In versions 4.14.8.3 and below, the fastgpt-preview-image.yml workflow is vulnerable to arbitrary code execution and secret exfiltration by any external contributor. It uses pullrequesttarget (which runs with access to repository secrets) but checks out code from the pull request author's fork, then builds and pushes Docker images using attacker-controlled Dockerfiles. This also enables a supply chain attack via the production container registry. A patch was not available at the time of publication.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-33075?
CVE-2026-33075 is considered a high severity vulnerability due to its potential for arbitrary code execution.
How do I fix CVE-2026-33075?
To fix CVE-2026-33075, ensure you upgrade FastGPT to version 4.14.8.4 or higher.
What type of vulnerability is CVE-2026-33075?
CVE-2026-33075 is an arbitrary code execution vulnerability affecting the fastgpt-preview-image.yml workflow.
What versions of FastGPT are affected by CVE-2026-33075?
FastGPT versions 4.14.8.3 and below are affected by CVE-2026-33075.
Can CVE-2026-33075 lead to data breaches?
Yes, CVE-2026-33075 can lead to secret exfiltration and potential data breaches due to its arbitrary code execution capabilities.