Dashboard / CVE-2026-40352

CVE-2026-40352

HIGH
MEDIUM Priority: 0.03 BB Relevance: 68/100
Published: 2026-04-17 Modified: 2026-10-26 First seen: 2026-10-29 Status: active

Attack Surface

Network Low Complexity No Interaction Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Network
AC: Low
PR: Low
UI: None
S: Unchanged
C: High
I: High
A: High

Description

FastGPT is an AI Agent building platform. In versions prior to 4.14.9.5, the password change endpoint is vulnerable to NoSQL injection. An authenticated attacker can bypass the "old password" verification by injecting MongoDB query operators. This allows an attacker who has gained a low-privileged session to change the password of their account (or others if combined with ID manipulation) without knowing the current one, leading to full account takeover and persistence. This issue has been fixed in version 4.14.9.5.

Weakness Classification (1)

Affected Software (1)

VendorProductVersion
fastgpt fastgpt < 4.14.9.5

References & Advisories (3)

Bug Bounty Relevance

68 / 100
✓ Network accessible
✓ Low complexity
✓ No user interaction

CVSS Score

8.8 / 10.0 v3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS — Exploitation Probability

0.38%
Raw Score 0.003800
Percentile 32.0%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00380
2026-10-28
0.00380

Intelligence Sources

nvd ref →

External Links