CVE-2026-85695
CriticalCVSS 9.4Exploitation Probability (EPSS)
Low risk35th percentile - higher than 35% of all known CVEs
Summary
FastChat contains an authentication bypass vulnerability in the /register_worker endpoint that allows unauthenticated attackers to register arbitrary worker addresses and perform server-side request forgery. Attackers can register malicious workers under victim model names to intercept user prompts, images, and responses, or probe internal network ports.
Risk Assessment
The risk includes interception of sensitive user data and unauthorized access to internal network resources, potentially leading to confidentiality and integrity breaches.
Recommendation
Immediately implement authentication and input validation for the /register_worker endpoint and restrict access to trusted networks only.
Other vulnerabilities in FastChat
Original NVD description (English source)
FastChat contains an authentication bypass vulnerability in the /register_worker endpoint that allows unauthenticated attackers to register arbitrary worker addresses and perform server-side request forgery. Attackers can register malicious workers under victim model names to intercept user prompts, images, and responses, or probe internal network ports across the worker mesh.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS