CyberRota Analysis
AI-GeneratedThe vulnerability affects the FastGPT AI application platform, where the POST /api/core/chat/record/getCollectionQuote endpoint improperly handles authorization, allowing low-privileged users to access data from other tenants by manipulating the initialId parameter. This could lead to unauthorized exposure of sensitive dataset quotes or full-text content, posing a significant risk to data confidentiality. Organizations using versions 4.14.17 to 4.15.0-beta5 should prioritize updating to version 4.15.0-beta6 or later to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
FastGPT is a knowledge-based AI application platform. From 4.14.17 until 4.15.0-beta5, the POST /api/core/chat/record/getCollectionQuote endpoint authenticates the caller's chat and collection context, but the initialId center-node lookup is not bound to that authorized context. A low-privileged tenant user can call the endpoint with valid attacker-owned appId, chatId, chatItemDataId, and collectionId values while supplying another tenant's dataset data id as initialId, causing the response to include foreign dataset quote or full-text content. This issue is fixed in version 4.15.0-beta5.