Reddit NetSec

CVE Database V5

AlienVault OTX General

Reddit InfoSec News

Exploit-DB RSS Feed

ThreatFox MISP Feed

CIRCL OSINT Feed

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

FastGPT is an open-source project that provides a platform for building, deploying, and operating AI-driven workflows and conversational agents. The Sandbox container (fastgpt-sandbox) is a specialized, isolated environment used by FastGPT to safely execute user-submitted or dynamically generated code in isolation. The sandbox before version 4.9.11 has insufficient isolation and inadequate restrictions on code execution by allowing overly permissive syscalls, which allows attackers to escape the intended sandbox boundaries. Attackers could exploit this to read and overwrite arbitrary files and bypass Python module import restrictions. This is patched in version 4.9.11 by restricting the allowed system calls to a safer subset and additional descriptive error messaging.

CVE-2025-49131 is a medium-severity vulnerability affecting labring's FastGPT platform, specifically versions prior to 4.9.11. FastGPT is an open-source framework designed to build, deploy, and operate AI-driven workflows and conversational agents. A critical component of FastGPT is the fastgpt-sandbox, a containerized isolated environment intended to securely execute user-submitted or dynamically generated code. The vulnerability arises from incorrect permission assignment and insufficient sandbox isolation, categorized under CWE-732 (Incorrect Permission Assignment for Critical Resource). Prior to version 4.9.11, the sandbox allowed overly permissive system calls (syscalls), which enabled attackers to escape the sandbox boundaries. This escape permits unauthorized reading and overwriting of arbitrary files on the host system and bypassing of Python module import restrictions, potentially allowing execution of malicious code outside the sandbox. The vulnerability does not require user interaction but does require low privileges (PR:L) on the system. The attack vector is network-based (AV:N), meaning exploitation can occur remotely. The vulnerability impacts confidentiality, integrity, and availability to a limited extent (C:L/I:L/A:L). The patch in version 4.9.11 addresses the issue by restricting allowed syscalls to a safer subset and improving error messaging to prevent sandbox escapes. No known exploits are currently reported in the wild, but the potential for sandbox escape in an AI workflow platform poses a significant risk if left unpatched.

Detailed information about CVE-2025-49131: CWE-732: Incorrect Permission Assignment for Critical Resource in labring FastGPT affecting labring FastGPT. Get real

CVE-2025-49131: CWE-732: Incorrect Permission Assignment for Critical Resource in labring FastGPT - Live Threat Intelligence - Threat Radar | OffSeq.com

Title	Severity	Type	Source	Date

Threats Tagged 'cve-2025-49131'

Filter Threats

Threats Tagged 'cve-2025-49131'