CVE-2026-32128

Description

FastGPT is an AI Agent building platform. In 4.14.7 and earlier, FastGPT's Python Sandbox (fastgpt-sandbox) includes guardrails intended to prevent file writes (static detection + seccomp). These guardrails are bypassable by remapping stdout (fd 1) to an arbitrary writable file descriptor using fcntl. After remapping, writing via sys.stdout.write() still satisfies the seccomp rule write(fd==1), enabling arbitrary file creation/overwrite inside the sandbox container despite the intended no file writes restriction.

PUBLISHED Reserved 2026-03-10 | Published 2026-03-11 | Updated 2026-03-12 | Assigner GitHub_M

Problem types

CWE-184: Incomplete List of Disallowed Inputs

Product status

References

github.com/...astGPT/security/advisories/GHSA-6hw6-mxrm-v6wj

cve.org (CVE-2026-32128)

nvd.nist.gov (CVE-2026-32128)

Download JSON