CVE-2026-44286: FastGPT: SSRF Vulnerability in Laf Workflow Node via Missing Internal Address Validation
FastGPT is an AI Agent building platform. Prior to version 4.14.17, an unauthenticated Server-Side Request Forgery (SSRF) vulnerability allows attackers (or authenticated users with App editing privileges) to send arbitrary HTTP requests to internal/private network addresses. The fetchData function in the lafModule workflow node uses axios to fetch user-controlled URLs without validating them against the application's internal network blocklist guard (isInternalAddress), bypassing SSRF protections. This issue has been patched in version 4.14.17.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
FastGPTto a version that resolves this vulnerability.Fixed in 4.14.17
Event History
Frequently Asked Questions
What is the severity of CVE-2026-44286?
CVE-2026-44286 is classified as a critical severity vulnerability due to its potential for unauthenticated exploitation.
How do I fix CVE-2026-44286?
To fix CVE-2026-44286, upgrade your FastGPT installation to version 4.14.17 or later.
Who is affected by CVE-2026-44286?
CVE-2026-44286 affects users of FastGPT versions prior to 4.14.17.
What is the nature of the vulnerability in CVE-2026-44286?
CVE-2026-44286 is a Server-Side Request Forgery (SSRF) vulnerability that can be exploited by unauthenticated attackers.
Can authenticated users exploit CVE-2026-44286?
Yes, authenticated users with App editing privileges can also exploit CVE-2026-44286.