CVE-2026-55418

Name of the Vulnerable Software and Affected Versions FastGPT versions prior to v4.15.0-beta5

Description Two file handlers fail to verify if a requested S3 object key belongs to the caller's team. Since S3 object keys are global within a bucket and only include the tenant ID as a path segment, an attacker can provide a key belonging to another team to access its file contents. This can be achieved through the 'chat-file presign' endpoint or the 'dataset preview' endpoint.

Recommendations Update to version v4.15.0-beta5.