FastGPT Community Edition versions 4.10.0 through 4.14.0 contain a NoSQL injection flaw in the POST /api/core/chat/getHistories endpoint. An unauthenticated attacker can craft JSON payloads that include malicious NoSQL operators; the server forwards these payloads directly to the database, bypassing all authorization checks. The attacker is thereby able to read the chat history titles of every user on the platform, exposing potentially sensitive information about user conversations.

FastGPT Community Edition 4.10.0 up to 4.14.0, inclusive

The flaw can be exploited by a simple unauthenticated HTTP POST to the exposed endpoint, making it easily reachable for anyone with network access. While there is no EPSS score, the lack of authentication and direct NoSQL operator injection suggests a high likelihood of exploitation. The vulnerability allows unauthorized data disclosure and could serve as a foothold for further attacks if additional sensitive data is reachable.