Insufficient Resource Isolation in FastGPT AI Agent Building Platform

CVE-2026-42343

What is CVE-2026-42343?

The FastGPT platform, an AI agent building tool, has a significant architectural vulnerability related to its code-sandbox component. In versions up to 4.14.13, the system's resource management is inadequately handled, relying on a mere application-level soft limit for memory management. This allows an attacker to circumvent memory checks through time-window attacks or to consume excessive resources via multiple CPU-intensive requests. Consequently, this leads to a Denial of Service, rendering the platform unusable for legitimate users. As of now, there are no publicly disclosed patches available to address this issue.

References