CVE-2026-40352

high

Published 2026-04-17 · Modified 2026-04-27

CVSS v3

8.8

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2

—

VIR risk

8.8

Description

FastGPT is an AI Agent building platform. In versions prior to 4.14.9.5, the password change endpoint is vulnerable to NoSQL injection. An authenticated attacker can bypass the "old password" verification by injecting MongoDB query operators. This allows an attacker who has gained a low-privileged session to change the password of their account (or others if combined with ID manipulation) without knowing the current one, leading to full account takeover and persistence. This issue has been fixed in version 4.14.9.5.

Predictions

Exploit likelihood

92%

Patch ETA

—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: security-advisories@github.com — https://github.com/labring/FastGPT/security/advisories/GHSA-422w-vrfj-72g6

vendor Authored 2026-05-27

Vendor advisory: security-advisories@github.com — https://github.com/labring/FastGPT/releases/tag/v4.14.9.5

vendor Authored 2026-05-27

Vendor advisory: security-advisories@github.com — https://github.com/labring/FastGPT/commit/bd966d479fbe414d02679cf79f9eaaab3d100a2d

Application impact

Vendor	Product	Versions	Fixed
fastgpt	fastgpt	`{"endExcluding":"4.14.9.5"}`	`4.14.9.5`

References

CWEs

CWE-943

Verify integrity in audit chain (admin only). AS-IS.