{"data":{"id":"f8e15555-028a-487c-aeed-0b43a1626c53","title":"CVE-2026-32128: FastGPT is an AI Agent building platform. In 4.14.7 and earlier, FastGPT's Python Sandbox (fastgpt-sandbox) includes…","summary":"CVE-2026-32128 affects FastGPT, an AI Agent building platform, in version 4.14.7 and earlier. Its Python Sandbox (fastgpt-sandbox) relies on static detection and seccomp to block file writes, but an attacker can remap stdout (fd 1) to an arbitrary writable file descriptor using fcntl. Because sys.stdout.write() still satisfies the seccomp rule write(fd==1), the attacker can create or overwrite arbitrary files inside the sandbox container.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-32128","publishedAt":"2026-03-11T22:16:32.633Z","cveId":"CVE-2026-32128","cweIds":["CWE-184"],"cvssScore":"6.3","cvssSeverity":"medium","severity":"medium","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["FastGPT"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"FastGPT Python Sandbox file write restriction bypass via stdout remapping","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","attackVector":"network","attackComplexity":"low","privilegesRequired":"low","userInteraction":"none","exploitMaturity":"unknown","epssScore":0.00314,"epssCheckedAt":"2026-11-04T06:10:13.969Z","kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-11-03T18:11:01.624Z","patchAvailable":null,"disclosureDate":"2026-03-11T22:16:32.633Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["integrity","availability"],"aiComponentTargeted":"plugin","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[]}}