CVE-2026-61644 | labring FastGPT up to 4.15.0-beta4 CollectionQuote Endpoint getCollectionQuote initialId improper authorization

July 15, 2026 Yanac

A vulnerability was found in labring FastGPT up to 4.15.0-beta4. It has been rated as problematic. Affected by this issue is the function getCollectionQuote of the file /api/core/chat/record/getCollectionQuote of the component CollectionQuote Endpoint. Performing a manipulation of the argument initialId results in improper authorization.

This vulnerability is identified as CVE-2026-61644. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More