CVE-2026-55418

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-55418", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-06-16T21:48:43.125Z", "datePublished": "2026-07-07T21:18:45.315Z", "dateUpdated": "2026-07-09T14:42:06.607Z"}, "containers": {"cna": {"title": "FastGPT: S3 presign/read handlers do not bind the object key to the caller's team (cross-team file disclosure)", "problemTypes": [{"descriptions": [{"cweId": "CWE-639", "lang": "en", "description": "CWE-639: Authorization Bypass Through User-Controlled Key", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 8.6, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N", "version": "3.1"}}], "references": [{"name": "https://github.com/labring/FastGPT/security/advisories/GHSA-6rxv-p43w-mmx5", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/labring/FastGPT/security/advisories/GHSA-6rxv-p43w-mmx5"}, {"name": "https://github.com/labring/FastGPT/pull/7104", "tags": ["x_refsource_MISC"], "url": "https://github.com/labring/FastGPT/pull/7104"}, {"name": "https://github.com/labring/FastGPT/commit/decb6d2fb1417fb9e2bca145d2dcc9cbcf06396c", "tags": ["x_refsource_MISC"], "url": "https://github.com/labring/FastGPT/commit/decb6d2fb1417fb9e2bca145d2dcc9cbcf06396c"}, {"name": "https://github.com/labring/FastGPT/releases/tag/v4.15.0-beta5", "tags": ["x_refsource_MISC"], "url": "https://github.com/labring/FastGPT/releases/tag/v4.15.0-beta5"}], "affected": [{"vendor": "labring", "product": "FastGPT", "versions": [{"version": "< 4.15.0-beta5", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-07-07T21:18:45.315Z"}, "descriptions": [{"lang": "en", "value": "FastGPT is an open source AI knowledge base platform. Prior to v4.15.0-beta5, two FastGPT file handlers authorize an unrelated resource and then sign or read an S3 object using a key taken directly from the request, without checking that the key belongs to the caller's team. Because S3 object keys are global within the bucket and carry the tenant id only as a path segment, an attacker can supply another team's key and obtain its file contents through the chat-file presign endpoint or dataset preview endpoint. This issue is fixed in version v4.15.0-beta5."}], "source": {"advisory": "GHSA-6rxv-p43w-mmx5", "discovery": "UNKNOWN"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-07-09T14:38:04.939492Z", "id": "CVE-2026-55418", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-07-09T14:42:06.607Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-55418", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-07-09T14:38:04.939492Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-07-09T14:38:05.887Z"}}], "cna": {"title": "FastGPT: S3 presign/read handlers do not bind the object key to the caller's team (cross-team file disclosure)", "source": {"advisory": "GHSA-6rxv-p43w-mmx5", "discovery": "UNKNOWN"}, "metrics": [{"cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 8.6, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}], "affected": [{"vendor": "labring", "product": "FastGPT", "versions": [{"status": "affected", "version": "< 4.15.0-beta5"}]}], "references": [{"url": "https://github.com/labring/FastGPT/security/advisories/GHSA-6rxv-p43w-mmx5", "name": "https://github.com/labring/FastGPT/security/advisories/GHSA-6rxv-p43w-mmx5", "tags": ["x_refsource_CONFIRM"]}, {"url": "https://github.com/labring/FastGPT/pull/7104", "name": "https://github.com/labring/FastGPT/pull/7104", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/labring/FastGPT/commit/decb6d2fb1417fb9e2bca145d2dcc9cbcf06396c", "name": "https://github.com/labring/FastGPT/commit/decb6d2fb1417fb9e2bca145d2dcc9cbcf06396c", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/labring/FastGPT/releases/tag/v4.15.0-beta5", "name": "https://github.com/labring/FastGPT/releases/tag/v4.15.0-beta5", "tags": ["x_refsource_MISC"]}], "descriptions": [{"lang": "en", "value": "FastGPT is an open source AI knowledge base platform. Prior to v4.15.0-beta5, two FastGPT file handlers authorize an unrelated resource and then sign or read an S3 object using a key taken directly from the request, without checking that the key belongs to the caller's team. Because S3 object keys are global within the bucket and carry the tenant id only as a path segment, an attacker can supply another team's key and obtain its file contents through the chat-file presign endpoint or dataset preview endpoint. This issue is fixed in version v4.15.0-beta5."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-639", "description": "CWE-639: Authorization Bypass Through User-Controlled Key"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-07-07T21:18:45.315Z"}}}, "cveMetadata": {"cveId": "CVE-2026-55418", "state": "PUBLISHED", "dateUpdated": "2026-07-09T14:42:06.607Z", "dateReserved": "2026-06-16T21:48:43.125Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2026-07-07T21:18:45.315Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "FastGPT", "vendor": "labring", "versions": [{"status": "affected", "version": "< 4.15.0-beta5"}]}], "source": "security-advisories@github.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "FastGPT is an open source AI knowledge base platform. Prior to v4.15.0-beta5, two FastGPT file handlers authorize an unrelated resource and then sign or read an S3 object using a key taken directly from the request, without checking that the key belongs to the caller's team. Because S3 object keys are global within the bucket and carry the tenant id only as a path segment, an attacker can supply another team's key and obtain its file contents through the chat-file presign endpoint or dataset preview endpoint. This issue is fixed in version v4.15.0-beta5."}, {"lang": "es", "value": "FastGPT es una plataforma de base de conocimiento de IA de c\u00f3digo abierto. Antes de la v4.15.0-beta5, dos manejadores de archivos de FastGPT autorizan un recurso no relacionado y luego firman o leen un objeto S3 utilizando una clave tomada directamente de la solicitud, sin verificar que la clave pertenezca al equipo del solicitante. Debido a que las claves de objeto S3 son globales dentro del bucket y llevan el ID de inquilino solo como un segmento de ruta, un atacante puede proporcionar la clave de otro equipo y obtener el contenido de su archivo a trav\u00e9s del endpoint de prefirma de chat-file o el endpoint de vista previa de conjunto de datos. Este problema se solucion\u00f3 en la versi\u00f3n v4.15.0-beta5."}], "id": "CVE-2026-55418", "lastModified": "2026-10-25T20:10:00.147", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 8.6, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 4.0, "source": "security-advisories@github.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-55418", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-07-09T14:38:04.939492Z", "version": "2.0.3"}}]}, "published": "2026-07-07T22:16:53.930", "references": [{"source": "security-advisories@github.com", "url": "https://github.com/labring/FastGPT/commit/decb6d2fb1417fb9e2bca145d2dcc9cbcf06396c"}, {"source": "security-advisories@github.com", "url": "https://github.com/labring/FastGPT/pull/7104"}, {"source": "security-advisories@github.com", "url": "https://github.com/labring/FastGPT/releases/tag/v4.15.0-beta5"}, {"source": "security-advisories@github.com", "url": "https://github.com/labring/FastGPT/security/advisories/GHSA-6rxv-p43w-mmx5"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-639"}], "source": "security-advisories@github.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,4.15.0-beta5)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "FastGPT", "source": "cna", "vendor": "labring"}, "product": "fastgpt", "vendor": "labring"}], "created": "2026-07-07T22:30:17.132847+00:00", "updated": "2026-08-01T17:15:03.402660+00:00", "vendors": ["labring", "labring$PRODUCT$fastgpt"]}