CVE-2026-44285 | labring FastGPT up to 4.15.0-beta0 Dataset Preview Endpoint getPreviewChunks server-side request forgery (GHSA-c65v-7vx6-f8m3)

SecurityVulns
Yanac

A vulnerability has been found in labring FastGPT up to 4.15.0-beta0 and classified as critical. This affects an unknown part of the file /api/core/dataset/file/getPreviewChunks of the component Dataset Preview Endpoint. The manipulation leads to server-side request forgery.

This vulnerability is documented as CVE-2026-44285. The attack can be initiated remotely. There is not any exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More