A vulnerability labeled as problematic has been found in labring FastGPT up to 4.14.8.3. The impacted element is the function pull_request_target. Such manipulation leads to download of code without integrity check.

This vulnerability is referenced as CVE-2026-33075. It is possible to launch the attack remotely. No exploit is available.