ETK-2026-1343Zero's internal tracking ID, independent of the CVE number.

{
  "etk_id": "ETK-2026-1343",
  "cve_id": null,
  "display_id": "ETK-2026-1343",
  "ghsa_id": "GHSA-x765-6926-7xc9",
  "euvd_id": null,
  "status": "published",
  "anchor_state": "awaiting_cve",
  "title": "DNS rebinding SSRF in FastGPT MCP client",
  "summary": "FastGPT MCP client connections can be redirected to internal or local addresses because DNS validation is not bound to the address ultimately used for the connection. An authenticated user who can configure an MCP tool URL and controls that hostname's DNS can potentially make FastGPT access internal services in production deployments.",
  "mitigation": "Upgrade FastGPT to v4.17.1 or later. Until upgraded, restrict MCP tool creation and updates to trusted administrators and block outbound access to internal, loopback, and cloud metadata networks.",
  "vendor": null,
  "product": "FastGPT",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        "<4.17.1"
      ],
      "ecosystem": null,
      "fixed_versions": [
        "v4.17.1"
      ],
      "package_name": "FastGPT",
      "purl": null
    }
  ],
  "cwes": [
    367
  ],
  "cvss_score": 9,
  "cvss_src": "ethiack_provisional",
  "cvss_vector": null,
  "epss_score": null,
  "epss_percentile": null,
  "epss_asof": null,
  "automation": "contextual",
  "check": false,
  "check_confidence_basis": null,
  "exploit": false,
  "pipeline_minutes": 55.31896255,
  "t0_at": null,
  "signals": {
    "trigger_signal": {
      "at": "2026-10-12T09:50:24+00:00",
      "days": -8.792402993229167,
      "is_lower_bound": true,
      "measured_at": "2026-10-21T04:51:27.640188+00:00",
      "url": "https://github.com/labring/FastGPT/security/advisories/GHSA-x765-6926-7xc9"
    }
  }
}