CVE-2026-54601: FastGPT: reTrainingCollection allows server-owned datasetId override causing cross-tenant authorization confusion
FastGPT is an open source AI knowledge base platform. From 4.14.17 to before 4.15.0-beta4, FastGPT allows an authenticated tenant user to call POST /api/core/dataset/collection/create/reTrainingCollection in a way that persists a server-owned datasetId value from another tenant. This creates mixed dataset objects and downstream dataset, collection, and training endpoints then make authorization decisions from inconsistent ownership anchors, allowing cross-tenant read, update, and delete access when mixed object ids are known. This issue is fixed in version 4.15.0-beta4.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
FastGPTto a version that resolves this vulnerability.Fixed in 4.15.0-beta4
Event History
Frequently Asked Questions
What is the severity of CVE-2026-54601?
The severity of CVE-2026-54601 is rated as medium with a score of 6.3.
How do I fix CVE-2026-54601?
To fix CVE-2026-54601, upgrade FastGPT to version 4.15.0-beta4 or later.
What type of vulnerability is CVE-2026-54601?
CVE-2026-54601 is a cross-tenant authorization confusion vulnerability.
What can an attacker achieve by exploiting CVE-2026-54601?
An attacker can exploit CVE-2026-54601 to persist a server-owned datasetId from another tenant, leading to unauthorized data access.
Which versions of FastGPT are affected by CVE-2026-54601?
CVE-2026-54601 affects FastGPT versions from 4.14.17 up to but not including 4.15.0-beta4.