CVE-2026-40252: Broken Access Control (IDOR) Leading to Cross-Tenant Application Access in FastGPT
FastGPT is an AI Agent building platform. Prior to 4.14.10.4, Broken Access Control vulnerability (IDOR/BOLA) allows any authenticated team to access and execute applications belonging to other teams by supplying a foreign appId. While the API correctly validates the team token, it does not verify that the requested application belongs to the authenticated team. This leads to cross-tenant data exposure and unauthorized execution of private AI workflows. This vulnerability is fixed in 4.14.10.4.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-40252?
The severity of CVE-2026-40252 is classified as high due to its potential for unauthorized access across tenant applications.
How do I fix CVE-2026-40252?
To fix CVE-2026-40252, upgrade FastGPT to version 4.14.10.4 or later.
What does CVE-2026-40252 expose?
CVE-2026-40252 exposes a broken access control vulnerability that allows authenticated users to access applications belonging to other teams.
Are there any workarounds for CVE-2026-40252?
There are no recommended workarounds for CVE-2026-40252; updating to the patched version is the advised approach.
Who is affected by CVE-2026-40252?
Any authenticated user in FastGPT versions prior to 4.14.10.4 is affected by CVE-2026-40252.