Skip to content
fastchatGHSA-h254-g997-685c

FastChat Server-Side Request Forgery vulnerability

High7.5CVE-2024-11603 · Published Mar 20, 2025 · updated Jul 7, 2026

GitHub advisory

Affected versions

PackageAffectedFixed in
fschat
PyPI
<= 0.2.36No fix yet
Details and references

A Server-Side Request Forgery (SSRF) vulnerability exists in lm-sys/fastchat version 0.2.36. The vulnerability is present in the `/queue/join?` endpoint, where insufficient validation of the path parameter allows an attacker to send crafted requests. This can lead to unauthorized access to internal networks or the AWS metadata endpoint, potentially exposing sensitive data and compromising internal servers.

CVSS 3.0
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Severity from
GitHub (reviewed advisory)
Weakness
CWE-918
Also known as
CVE-2024-11603, PYSEC-2026-1397

More fastchat advisories

All
DateAdvisory
Mar 202025FastChat open redirect vulnerability
CVE-2024-10908Medium6.1no fix yet
Mar 202025FastChat Denial of Service vulnerability
CVE-2024-10912High7.5no fix yet
Mar 202025FastChat Uncontrolled Resource Consumption vulnerability
CVE-2024-10907High7.5no fix yet
Mar 202025FastChat Server-Side Request Forgery vulnerability
CVE-2024-12376High7.5no fix yet
Apr 20FastChat has Denial of Service Through Blocking Event Loop in Model Workers (Incomplete Fix for ff66426)
CVE-2026-6607Medium5.3no fix yet
Apr 20FastChat has a Content Moderation Bypass via Arena Side-by-Side Views
CVE-2026-6608Medium5.3no fix yet

Critical advisories by email

Wednesdays: the week’s critical and high advisories in the AI and data stack, with the fixed versions. Only in weeks that have some.

Double opt-in. Unsubscribe any time.