CVE-2026-34162: FastGPT: Unauthenticated SSRF via httpTools Endpoint Leads to Internal API Key Theft
FastGPT is an AI Agent building platform. Prior to version 4.14.9.5, the FastGPT HTTP tools testing endpoint (/api/core/app/httpTools/runTool) is exposed without any authentication. This endpoint acts as a full HTTP proxy — it accepts a user-supplied baseUrl, toolPath, HTTP method, custom headers, and body, then makes a server-side HTTP request and returns the complete response to the caller. This issue has been patched in version 4.14.9.5.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
FastGPTto a version that resolves this vulnerability.Fixed in 4.14.9.5
Event History
Frequently Asked Questions
What is the severity of CVE-2026-34162?
CVE-2026-34162 is considered a high-severity vulnerability due to the potential for internal API key theft.
How do I fix CVE-2026-34162?
To fix CVE-2026-34162, upgrade FastGPT to version 4.14.9.5 or later.
What are the effects of CVE-2026-34162?
The effects of CVE-2026-34162 include unauthorized access to internal APIs and sensitive data exposure.
Who is affected by CVE-2026-34162?
CVE-2026-34162 affects all users of FastGPT versions prior to 4.14.9.5.
What type of vulnerability is CVE-2026-34162?
CVE-2026-34162 is an unauthenticated Server-Side Request Forgery (SSRF) vulnerability.