CVE-2025-52552
FastGPT is an AI Agent building platform. Prior to version 4.9.12, the LastRoute Parameter on login page is vulnerable t
FastGPT is an AI Agent building platform. Prior to version 4.9.12, the LastRoute Parameter on login page is vulnerable to open redirect and DOM-based XSS. Improper validation and lack of sanitization of this parameter allows attackers execute malicious JavaScript or redirect them to attacker-controlled sites.
This issue has been patched in version 4.9.12.
MEDIUM · CVSS 6.1
EPSS 0.00209
Schedule remediation
- Public exploit or PoC is available
Sigma rules0
YARA rules0