CVE-2026-33075— FastGPT has Arbitrary Code Execution in GitHub Actions via pull_request_target in fastgpt-preview-image.yml
Quick assessment
Affected
labring FastGPT
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
FastGPT是labring开源的一款基于大语言模型的开源知识库问答系统。 FastGPT 4.14.8.3及之前版本存在安全漏洞，该漏洞源于fastgpt-preview-image.yml工作流存在缺陷，可能导致任意代码执行和机密信息泄露。
Possible ATT&CK Techniques 3 AI
T1055 · Process Injection T1059 · Command and Scripting Interpreter T1651 · Cloud Administration Command
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-33075
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
FastGPT has Arbitrary Code Execution in GitHub Actions via pull_request_target in fastgpt-preview-image.yml
Source: CVE Program / CVE List V5
Vulnerability Description
FastGPT is an AI Agent building platform. In versions 4.14.8.3 and below, the fastgpt-preview-image.yml workflow is vulnerable to arbitrary code execution and secret exfiltration by any external contributor. It uses pull_request_target (which runs with access to repository secrets) but checks out code from the pull request author's fork, then builds and pushes Docker images using attacker-controlled Dockerfiles. This also enables a supply chain attack via the production container registry. A patch was not available at the time of publication.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
Source: CVE Program / CVE List V5
Vulnerability Type
下载代码缺少完整性检查
Source: CVE Program / CVE List V5
Vulnerability Title
FastGPT 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
FastGPT是labring开源的一款基于大语言模型的开源知识库问答系统。 FastGPT 4.14.8.3及之前版本存在安全漏洞，该漏洞源于fastgpt-preview-image.yml工作流存在缺陷，可能导致任意代码执行和机密信息泄露。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2026-33075
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-33075
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-33075 (1)
IV. Related Vulnerabilities
Same product: FastGPT
-
CVE-2026-84301
FastGPT safe axios SSRF guard still allows DNS rebinding TOC -
CVE-2026-68929
FastGPT: Unauthenticated WeChat channel hijack and denial of -
CVE-2026-61643
FastGPT: workflow runtime can execute another user's private -
CVE-2026-50562
FastGPT: Untrusted PR artifacts are pushed and deployed by p -
CVE-2026-61646
FastGPT: Shared axios SSRF guard validates only the initial
Same vendor: labring
-
CVE-2026-84301
FastGPT safe axios SSRF guard still allows DNS rebinding TOC -
CVE-2026-68929
FastGPT: Unauthenticated WeChat channel hijack and denial of -
CVE-2026-61643
FastGPT: workflow runtime can execute another user's private -
CVE-2026-50562
FastGPT: Untrusted PR artifacts are pushed and deployed by p -
CVE-2026-61646
FastGPT: Shared axios SSRF guard validates only the initial
Same weakness: CWE-494
-
CVE-2026-105295
GitAhead 2.5.0 through 2.7.1 Unverified Update Installation -
CVE-2026-105137
Laradock Build Process Dockerfile code download -
CVE-2026-100265
JetBrains Rider 2026.2.1前AI助手技能自动更新漏洞 -
CVE-2026-102930
virtualenv: Downloaded seed wheels (pip/setuptools) are not -
CVE-2026-73595
Dell SCG Policy Manager代码执行漏洞（<5.34/5.36）
V. Comments for CVE-2026-33075
No comments yet