CVE-2026-61643

Name of the Vulnerable Software and Affected Versions FastGPT versions 4.14.17 through 4.15.0-beta4

Description An authenticated user can save a workflow node that references another user's private HTTP toolset by providing a crafted tool ID in the format http-<victim toolset app id>/<tool name>. While standard toolset routes enforce access restrictions, the workflow save and runtime paths lack these authorization checks. This allows the /api/v2/chat/completions endpoint to resolve the reference and execute an HTTP tool owned by another user.

Recommendations Update to version 4.15.0-beta5.