Logo
Retour à la veille

CVE-2026-55418

Publié : 7 juillet 2026
Modifié : 7 juillet 2026
Lien officiel NVD
Score CVSS
8.6
HIGH

Description détaillée

FastGPT is an open source AI knowledge base platform. Prior to v4.15.0-beta5, two FastGPT file handlers authorize an unrelated resource and then sign or read an S3 object using a key taken directly from the request, without checking that the key belongs to the caller's team. Because S3 object keys are global within the bucket and carry the tenant id only as a path segment, an attacker can supply another team's key and obtain its file contents through the chat-file presign endpoint or dataset preview endpoint. This issue is fixed in version v4.15.0-beta5.

Vecteur d'attaque (CVSS)

Vecteur brut :CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

Références et Patchs

https://github.com/labring/FastGPT/commit/decb6d2fb1417fb9e2bca145d2dcc9cbcf06396chttps://github.com/labring/FastGPT/pull/7104https://github.com/labring/FastGPT/releases/tag/v4.15.0-beta5https://github.com/labring/FastGPT/security/advisories/GHSA-6rxv-p43w-mmx5

Dernières Vulnérabilités

CVE-2026-60002

ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a key re-exchange. (This outcome occurs only on the client side.)

VOIR DÉTAILS

CVE-2026-60001

sshd in OpenSSH before 10.4 does not always honor the minimum authentication delay.

VOIR DÉTAILS

CVE-2026-60000

sshd in OpenSSH before 10.4 allows remote attackers to cause a denial of service (resource consumption from excessive authentication attempts) because MaxAuthTries was mishandled for GSSAPIAuthentication.

VOIR DÉTAILS