CVE-2026-54602: FastGPT is a knowledge-based AI application platform. Prior to 4.15.0, GET /api/core/ai/record/getRecord authenticates the caller but loads LLM request and response traces only by requestId without...

Added to the CISA Known Exploited Vulnerabilities catalog on 07 Jul 2026. Vendor: AI/ML. Product: LLM.

FastGPT is a knowledge-based AI application platform. Prior to 4.15.0, GET /api/core/ai/record/getRecord authenticates the caller but loads LLM request and response traces only by requestId without team scoping, allowing any authenticated user to read another team's prompts, retrieved RAG chunks,...

Required action: Review and patch if applicable to your AI infrastructure.