CVE-2026-34162 FastGPT: Unauthenticated SSRF via httpTools Endpoint Leads to Internal API Key Theft

Critical 10.0 Published 31 Mar 2026 Updated 31 Mar 2026

Unauthenticated attackers can exploit an exposed HTTP proxy endpoint to perform Server-Side Request Forgery and steal internal API keys.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2026-34162?

CVE-2026-34162 is a critical server-side request forgery vulnerability in labring FastGPT, published on 31 Mar 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

FastGPT is an AI Agent building platform. Prior to version 4.14.9.5, the FastGPT HTTP tools testing endpoint (/api/core/app/httpTools/runTool) is exposed without any authentication. This endpoint acts as a full HTTP proxy — it accepts a user-supplied baseUrl, toolPath, HTTP method, custom headers, and body, then makes a server-side HTTP request and returns the complete response to the caller. This issue has been patched in version 4.14.9.5.

Weakness: CWE-918, CWE-306

Which versions are affected by CVE-2026-34162?

It affects 1 product.

Products include Fastgpt Fastgpt.

How do I fix CVE-2026-34162?

No fix has been published for CVE-2026-34162 yet. Limit exposure of the affected software until one is available.

Upgrade, and send outbound requests through an allow-list that blocks internal addresses. More about Server-side request forgery.

Is CVE-2026-34162 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-34162 exists.

Sources

Also known as GHSA-w36r-f268-pwrj.