CVE-2025-27600 — FastGPT SSRF
FastGPT is a knowledge-based platform built on the LLMs. Since the web crawling plug-in does not perform intranet IP verification, an attacker can initiate an intranet IP reques…
Published: 2025-03-06 · CVSS: 6.9 · CVSS 4.0
FastGPT is a knowledge-based platform built on the LLMs. Since the web crawling plug-in does not perform intranet IP verification, an attacker can initiate an intranet IP request, causing the system to initiate a request through the intranet and potentially obtain some private data on the intranet. This issue is fixed in 4.9.0.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7