https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-40352.htmlhttps://patchthecve.com/cve/CVE-2026-40352.htmlMon, 26 Oct 2026 21:10:00 +0000HIGH 8.8: FastGPT is an AI Agent building platform. In versions prior to 4.14.9.5, the password change endpoint is vulnerable to NoSQL injection. An authenticated attacker can bypass the "old password" verification by injecting MongoDB query operators. This allows an attacker who has gained a low-privileged shttps://patchthecve.com/cve/CVE-2026-40351.htmlhttps://patchthecve.com/cve/CVE-2026-40351.htmlMon, 26 Oct 2026 22:10:00 +0000CRITICAL 9.8: FastGPT is an AI Agent building platform. In versions prior to 4.14.9.5, the password-based login endpoint uses TypeScript type assertion without runtime validation, allowing an unauthenticated attacker to pass a MongoDB query operator object (e.g., {"$ne": ""}) as the password field. This NoSQL injhttps://patchthecve.com/cve/CVE-2026-40252.htmlhttps://patchthecve.com/cve/CVE-2026-40252.htmlMon, 26 Oct 2026 21:10:00 +0000HIGH 8.1: FastGPT is an AI Agent building platform. Prior to 4.14.10.4, Broken Access Control vulnerability (IDOR/BOLA) allows any authenticated team to access and execute applications belonging to other teams by supplying a foreign appId. While the API correctly validates the team token, it does not verify thttps://patchthecve.com/cve/CVE-2026-40100.htmlhttps://patchthecve.com/cve/CVE-2026-40100.htmlMon, 26 Oct 2026 21:10:00 +0000MEDIUM 5.3: FastGPT is an AI Agent building platform. Prior to 4.14.10.3, the /api/core/app/mcpTools/runTool endpoint accepts arbitrary URLs without authentication. The internal IP check in isInternalAddress() only blocks private IPs when CHECK_INTERNAL_IP=true, which is not the default. This allows unauthentic