Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
FastGPT is an AI Agent building platform. In versions 4.14.8.3 and below, the fastgpt-preview-image.yml workflow is vulnerable to arbitrary code execution and secret exfiltration by any external contributor. It uses pull_request_target (which runs with access to repository secrets) but checks out code from the pull request author's fork, then builds and pushes Docker images using attacker-controlled Dockerfiles. This also enables a supply chain attack via the production container registry. A patch was not available at the time of publication.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-03-20 | 2 | Disclosure1General1 |
| 2026-03-22 | 1 | Disclosure1 |
CVE-2026-33075 FastGPT is an AI Agent building platform. In versions 4.14.8.3 and below, the fastgpt-preview-image.yml workflow is vulnerable to arbitrary code execution and secret … https://www.cve.org/CVERecord?id=CVE-2026-33075
Post summary
FastGPT versions 4.14.8.3 and below have a workflow that allows arbitrary code execution and secret exposure, but no PoC, exploit, active use, or patch information is disclosed.
CVE-2026-33075 Arbitrary Code Execution in FastGPT CI/CD Workflow via Pull Request Targ... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-33075 Vulnerability Notification: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=3
Post summary
The tweet announces CVE-2026-33075, noting it enables arbitrary code execution in FastGPT’s CI/CD workflow via a pull request target, but offers no proof‑of‑concept, exploitation methods, or patch information.
🚨 CVE-2026-33075: FastGPT has Arbitrary Code Execu... pull_request_target + attacker-controlled Dockerfiles = instant repo takeover and secret theft - classic GitHub Actions... https://zerodaysignal.com/vulnerability/CVE-2026-33075 #netsec #vulnerability #CVE #sysadmin #zeroday
Post summary
The post announces CVE‑2026‑33075, outlining an arbitrary code execution flaw in FastGPT via attacker‑controlled Dockerfiles in GitHub Actions, without providing PoC, exploit tooling, active exploitation evidence, or remediation details.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | fastgpt | fastgpt | - | - | - |