Vulnerability in N/a
CVE-2026-79483
FastGPT Community Edition 4.10.0 through 4.14.0 are vulnerable to a NoSQL injection in the POST /api/core/chat/getHistories endpoint. An unauthenticated attacker can inject malicious NoSQL operators via crafted JSON payloads to bypass authorization checks, resulting in unauthorized access to chat history titles of all users across the platform.
Affected products
- N/a
Public proof-of-concept exploits
References
Frequently asked questions
- What is CVE-2026-79483?
- CVE-2026-79483 is a vulnerability in N/a. Published 2026-08-31.
- Is CVE-2026-79483 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.