CVE-2026-79483
UNKNOWN
NVD
CVSS Score
0
Severity
UNKNOWN
Published
Aug 31, 2026
Vendor
unknown
Description
FastGPT Community Edition 4.10.0 through 4.14.0 are vulnerable to a NoSQL injection in the POST /api/core/chat/getHistories endpoint. An unauthenticated attacker can inject malicious NoSQL operators via crafted JSON payloads to bypass authorization checks, resulting in unauthorized access to chat history titles of all users across the platform.