CyberRota Analysis
AI-GeneratedFastGPT versions prior to 4.15.0-beta4 are vulnerable to a cross-tenant access issue, where authenticated users can manipulate dataset identifiers to access and modify datasets owned by other tenants. This flaw can lead to unauthorized read, update, and delete operations across tenant boundaries, potentially compromising data integrity and confidentiality. Organizations using affected versions should prioritize upgrading to the latest release to mitigate these risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
FastGPT is an open source AI knowledge base platform. From 4.14.17 to before 4.15.0-beta4, FastGPT allows an authenticated tenant user to call POST /api/core/dataset/collection/create/reTrainingCollection in a way that persists a server-owned datasetId value from another tenant. This creates mixed dataset objects and downstream dataset, collection, and training endpoints then make authorization decisions from inconsistent ownership anchors, allowing cross-tenant read, update, and delete access when mixed object ids are known. This issue is fixed in version 4.15.0-beta4.