CVE-2026-61644

HIGHPre-NVD 7.77.7Elevated

7.7

EchelonGraph verdictPlan a fixSerious severity, but no confirmed exploitation yet.

High severity, but no confirmed exploitation yet

CISA-KEV: Not listedEPSS: —CVSS: 7.7Exploit: NoneExposed: 0

No vendor fix yet — apply a workaround or compensating control (WAF / firewall / segmentation) and watch for a patch.

FastGPT is a knowledge-based AI application platform. From 4.14.17 until 4.15.0-beta5, the POST /api/core/chat/record/getCollectionQuote endpoint authenticates the caller's chat and collection context, but the initialId center-node lookup is not bound to that authorized context. A low-privileged tenant user can call the endpoint with valid attacker-owned appId, chatId, chatItemDataId, and collectionId values while supplying another tenant's dataset data id as initialId, causing the response to include foreign dataset quote or full-text content. This issue is fixed in version 4.15.0-beta5.

CVSS v3: 7.7
EG Score: 7.7(low)
EPSS: —
KEV: Not listed

Published

July 15, 2026

Last Modified

July 15, 2026

Advisory Details (3)

Auto-updated Jul 15, 2026

🔬 Proof of concept available. Patch available. Sources: github, github_pr, github_release.

github Patch Available🟡 PoC Available

FastGPT: /api/core/chat/record/getCollectionQuote can disclose cross-tenant dataset text due to an unbound initialId lookup · Advisory · labring/FastGPT · GitHub

https://github.com/labring/FastGPT/security/advisories/GHSA-mmg6-2g54-j896

github_release Patch Available

v4.15.0-beta5

Patch available: labring/FastGPT v4.15.0-beta5 (pre-release)

https://github.com/labring/FastGPT/releases/tag/v4.15.0-beta5

github_pr Patch Available

[codex] secure code sandbox secret isolation

Patch available: labring/FastGPT v4.15.0-beta5 (PR #7173 merged 2026-06-24)

https://github.com/labring/FastGPT/pull/7173

Weakness Classification(1)

MITRE Common Weakness Enumeration — the root-cause categories this CVE belongs to.

CWE-863Incorrect Authorization

Data Freshness Timeline

(refreshed 2× in last 7d / 2× in last 30d)

Each row is a source pipeline that fetched or updated this CVE on that date, with what changed. For example, "NVD update" means NVD published or revised its analysis for this CVE; "MITRE cvelistV5" means we ingested or refreshed it from the CNA feed. Most recent first.

2026-07-15 14:51 UTCEG score recompute
2026-07-15 14:49 UTCMITRE cvelistV5first tracked

Frequently asked(4)

What is CVE-2026-61644?

CVE-2026-61644 is a high vulnerability published on July 15, 2026. FastGPT is a knowledge-based AI application platform. From 4.14.17 until 4.15.0-beta5, the POST /api/core/chat/record/getCollectionQuote endpoint authenticates the caller's chat and collection context, but the initialId center-node lookup is not bound to that authorized context. A low-privileged…

When was CVE-2026-61644 disclosed?

CVE-2026-61644 was first published in the National Vulnerability Database on July 15, 2026. EchelonGraph re-ingests CVE updates from NVD on a 2-hour cycle, so this page reflects the latest published state.

What is the CVSS score of CVE-2026-61644?

CVE-2026-61644 has a CVSS v3 base score of 7.7 (NVD). The EG score is currently aggregating — additional source signals are being incorporated as they become available..

How do I remediate CVE-2026-61644?

Patch to the fixed version published by the affected vendor. Where vendor advisories exist for CVE-2026-61644, EchelonGraph cross-links them in the Vendor Advisories panel below — those typically contain the canonical remediation steps, fixed version numbers, and any vendor-specific mitigations.

Dependency Blast Radius

Explore the affected products and dependency analysis for CVE-2026-61644

Explore →

Is Your Infrastructure Affected by CVE-2026-61644?

EchelonGraph automatically scans your cloud infrastructure and maps CVE exposure using blast radius analysis.

Start Free Scan →Browse All CVEs