CVE-2026-40352 - Vulnerability Analysis

Overview

FastGPT < 4.14.9.5 contains a NoSQL injection caused by improper sanitization in the password change endpoint, letting authenticated attackers bypass old password verification and change passwords, exploit requires authentication.

Severity & Score

Impact

Authenticated attackers can change passwords without knowing the current one, leading to full account takeover and persistence.

Mitigation

Upgrade to version 4.14.9.5 or later.

References

• https://github.com/labring/FastGPT/commit/bd966d479fbe414d02679cf79f9eaaab3d100a2d
• https://github.com/labring/FastGPT/releases/tag/v4.14.9.5
• https://github.com/labring/FastGPT/security/advisories/GHSA-422w-vrfj-72g6

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner