CVE-2026-26075 is a medium severity Cross-Site Request Forgery (CSRF) vulnerability identified in labring's FastGPT platform, an AI Agent building tool that relies on web page acquisition and HTTP nodes to initiate data acquisition requests from its server. The vulnerability stems from insufficient CSRF protections on these server-initiated requests, allowing attackers to craft malicious web requests that can be executed in the context of an authenticated user without their consent. This could lead to unauthorized actions being performed on the server, such as manipulating data acquisition workflows or triggering unintended operations. The vulnerability does not require authentication or user interaction, increasing its risk profile. The vendor addressed the issue in FastGPT version 4.14.7 by enhancing internal network isolation and implementing stricter detection of internal network addresses to prevent exploitation. The CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N) reflects a network attack vector with low attack complexity, no privileges or user interaction required, and limited impact on confidentiality and integrity but some impact on availability. No public exploits are known at this time, but the vulnerability poses a risk to environments where FastGPT is deployed, especially those exposed to untrusted networks or users.

For European organizations using FastGPT versions prior to 4.14.7, this vulnerability could lead to unauthorized server-side actions initiated via CSRF attacks. Potential impacts include manipulation of AI agent data acquisition processes, disruption of automated workflows, and possible degradation of service availability. While confidentiality impact is limited, integrity and availability could be affected if attackers exploit this flaw to alter or disrupt data acquisition tasks. Organizations relying on FastGPT for critical AI operations may face operational disruptions or data inconsistencies. The lack of required authentication or user interaction increases the risk of automated exploitation attempts, especially in environments where users access FastGPT interfaces from browsers exposed to malicious websites. This could be particularly concerning for sectors with high reliance on AI-driven automation, such as finance, manufacturing, or research institutions in Europe.

European organizations should immediately upgrade FastGPT to version 4.14.7 or later to apply the vendor's fix. In addition to patching, organizations should implement strict network segmentation and internal network isolation to limit exposure of FastGPT servers to untrusted networks. Employing web application firewalls (WAFs) with rules to detect and block CSRF attack patterns can provide additional protection. Organizations should also enforce the use of anti-CSRF tokens in all web forms and API requests related to FastGPT interfaces. Monitoring and logging of unusual request patterns to FastGPT servers can help detect attempted exploitation. Finally, educating users about the risks of interacting with untrusted websites while authenticated to FastGPT can reduce the likelihood of successful CSRF attacks.