CVE-2026-85695: FastChat contains an authentication bypass vulnerability in the /register_worker endpoint that allows unauthenticated at

FastChat has a security flaw in its /register_worker endpoint (a part of the software that handles worker registration) where attackers don't need to log in to register fake workers that can intercept user data like prompts and responses. Attackers can also use this vulnerability to perform SSRF (server-side request forgery, where they trick the server into making requests to internal networks it shouldn't access) to probe internal network ports.