Read the docs
TI-2026-30646 Aliases CVE-2026-42343

FastGPT: Uncontrolled Resource Consumption leading to Sandbox Exhaustion

Priority HIGH 67CWE-400Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Attack requirements
Present
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · Low
Fix status
No fix listed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-400.

Summary

FastGPT is an AI Agent building platform. In versions 4.14.13 and prior, the code-sandbox component suffers from insufficient resource isolation and uncontrolled resource consumption. The service relies solely on an application-level soft limit (a 500ms polling interval) for memory management and lacks strict OS-level constraints such as cgroups or kernel-level namespaces. This architectural weakness allows attackers to easily bypass memory checks via time-window attacks, or exhaust the entire JavaScript worker pool via concurrent CPU-intensive requests, resulting in a complete Denial of Service (DoS) for legitimate users. At time of publication, there are no publicly available patches.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00268 19th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
labringFastGPTup to 4.14.13—No fix listedCNA
  • FastGPT Vendorlabring Affected up to 4.14.13 Fixed in — No fix listed CNA

CPE names Threatist (inferred) · 1

Inferred from how NVD named this product before; not given by a source.

CPEVersionsRoleVendor
cpe:2.3:a:fastgpt:fastgpt:*:*:*:*:*:*:*:*——Fastgpt
  • cpe:2.3:a:fastgpt:fastgpt:*:*:*:*:*:*:*:* Versions — — ·Fastgpt

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-42343

References

Other 1

  • TI-2026-30610 FastGPT: Unauthenticated Remote Code Execution (RCE) via code-server Misconfiguration in agent-sandbox CVSS 3.1CRITICAL 9.8
  • TI-2026-48466 FastGPT: Unauthenticated WeChat channel hijack and denial of service via shareId-only authorization CVSS 4.0CRITICAL 9.3
  • TI-2026-44161 FastGPT: Unauthenticated cross-tenant data access via forgeable plugin-invoke JWT (default INVOKE_TOKEN_SECRET='token') CVSS 4.0HIGH 8.8
  • TI-2026-44148 Incorrect authorization in labring FastGPT CVSS 3.1HIGH 7.7
  • TI-2026-39440 FastGPT: SSRF in HTTP-tool OpenAPI schema importer via SwaggerParser $ref (bypasses the isInternalAddress guard) CVSS 3.1HIGH 7.7
  • TI-2026-57936 FastGPT safe axios SSRF guard still allows DNS rebinding TOCTOU on protected outbound requests CVSS 3.1MEDIUM 6.3
See all 18 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences