CVE-2026-44287Disclosure

LOWCVSS 6.3 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

FastGPT is an AI Agent building platform. Prior to 4.15.0-beta1, the JavaScript sandbox worker at projects/code-sandbox/src/pool/worker.ts:356 blocks dynamic import() with the regex /\bimport\s*\(/.test(code). JavaScript syntax accepts a block comment between import and (; the regex matches only ASCII whitespace, and the bytes /, *, *, / are not in the \s character class. The payload import/**/("child_process") parses as a syntactically valid dynamic import that the regex does not detect. Because import() is not wrapped by the safeRequire Proxy (which only proxies require), the attacker loads child_process and calls execSync - arbitrary command execution as uid=100(sandbox) inside the sandbox container. This vulnerability is fixed in 4.15.0-beta1.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-94CWE-184

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

2 mentions across 2 observed days
Momentum state: stable

What's happening

Technical details provided in 2 signals
Disclosure: 2 classified signals
Peaked 1d ago at 1 mentions (2026-05-30); latest day: 1
2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d

Signal classification1 categories

Disclosure

2100.0%

Referenced assets1 URL

By indicator

https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-44287

Full discourse2 posts

Cyera@cyera_io127d
Disclosure
The breakdown of the 6 CVEs discovered and responsibly disclosed by our team: • CVE-2026-44284 & 44285 (CRITICAL): Prototype pollution & RCE via schema loading/code generation • CVE-2026-44287, 44289, 44291 (HIGH): DoS & Prototype pollution during decoding • CVE-2026-44293 (MED): Unsafe descriptor handling
Post summary
The post discloses six newly found CVEs with brief technical details but contains no evidence of PoC, exploit code, active exploitation, patches, or false‑positive claims.
1000042
795 followersView on X
Vulmon Vulnerability Feed@VulmonFeeds137d
Disclosure
CVE-2026-44287 Code Sandbox Bypass via Block Comment in FastGPT Before 4.15.0-beta1 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-44287
Post summary
The post references CVE-2026-44287, a Code Sandbox bypass discovered in FastGPT prior to version 4.15.0-beta1, but provides no PoC, exploit, patch, or active exploitation evidence.
0000058
4.0K followersView on X

Explore more

Back to dashboard