FastGPT Workflow Node SSRF Vulnerability

A server-side request forgery (SSRF) vulnerability has been identified in FastGPT versions prior to 4.11.1. The issue arises in the workflow file reading node, where network links are not subjected to security verification, creating a potential risk for SSRF attacks.

Impact

Exploitation of this vulnerability allows for server-side request forgery, where an attacker can manipulate the server to make unauthorized requests, potentially leading to exposure of internal resources or services.

Remediation

Users can upgrade to FastGPT version 4.11.1 or later to address this vulnerability.