CVE-2026-44286 | labring FastGPT up to 4.14.16 HTTP Request fetchData server-side request forgery (GHSA-xpx6-xcpf-76qg)

A vulnerability described as critical has been identified in labring FastGPT up to 4.14.16. Affected is the function fetchData of the component HTTP Request Handler. Executing a manipulation can lead to server-side request forgery.

This vulnerability is handled as CVE-2026-44286. The attack can be executed remotely. There is not any exploit available.

Upgrading the affected component is recommended.