{"data":{"id":"64963161-22dc-42ac-a7c6-6210eddf63a1","title":"CVE-2025-49131: FastGPT is an open-source project that provides a platform for building, deploying, and operating AI-driven workflows…","summary":"FastGPT's Sandbox container (fastgpt-sandbox), which runs user-submitted or dynamically generated code, has insufficient isolation and overly permissive syscalls before version 4.9.11. Attackers can exploit this to escape the sandbox, read and overwrite arbitrary files, and bypass Python module import restrictions.","solution":"Fixed in version 4.9.11, which restricts the allowed system calls to a safer subset and adds more descriptive error messaging.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-49131","publishedAt":"2025-06-09T13:15:24.120Z","cveId":"CVE-2025-49131","cweIds":["CWE-732"],"cvssScore":"6.3","cvssSeverity":"medium","severity":"medium","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["FastGPT"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"FastGPT sandbox escape through overly permissive syscalls","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00455,"epssCheckedAt":"2026-11-04T06:10:15.563Z","kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-10-28T18:09:34.368Z","patchAvailable":null,"disclosureDate":null,"fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":["CAPEC-1"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"plugin","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null,"fixes":[]}}