FastGPT Community Edition 4.10.0 through 4.14.0 contain a NoSQL injection flaw in the POST /api/core/chat/getHistories endpoint. An unauthenticated attacker can craft JSON payloads that include malicious NoSQL operators; the server forwards these payloads directly to the database, bypassing all authorization checks. The attacker is thereby able to read the chat history titles of every user on the platform, exposing potentially sensitive information about user conversations.

FastGPT Community Edition 4.10.0 up to 4.14.0, inclusive

The flaw can be exploited by a simple unauthenticated HTTP POST to the exposed endpoint, making it easily reachable for anyone with network access. The CVSS score of 5.3 indicates a medium severity, and the EPSS score of < 1% suggests a low probability of active exploitation. However, the lack of authentication and direct NoSQL operator injection still allow unauthorized data disclosure and could serve as a foothold for further attacks if additional sensitive data is reachable.