Starstruk Logo MarkStarstruk

v4.14.13

labring/FastGPTv4.14.13Apr 22, 2026by c121914yu

AI Summary

Addresses critical security vulnerabilities and enhances API usability with null support and authentication fixes.

Key Highlights

  • Fixed a critical unauthenticated RCE risk in the opensandbox.
  • Added null support for `chatId` in the completions interface.
  • Fixed authentication failures for share link quote APIs.

New Features

  • Null chatId support for completions

Full Release Notes

## 升级指南

### 1. 更新镜像 tag

- 更新 fastgpt-app(fastgpt 主服务) 镜像 tag: v4.14.13

## 🐛 修复

1. 分享链接获取单条引用接口鉴权失败。
2. opensandbox 鉴权绕过风险。

## ⚙️ 优化

1. completions 接口 chatId 支持 null 类型。

## What's Changed
* Fix docker-compose command syntax by @Deepturn in https://github.com/labring/FastGPT/pull/6777
* fix(sandbox): fix unauthenticated RCE via agent-sandbox by @ctlaltlaltc in https://github.com/labring/FastGPT/pull/6781
* fix: correct export config sensitive filter behavior by @c121914yu in https://github.com/labring/FastGPT/pull/6782
* chore: bump deploy image tags for v4.14.12 by @xqvvu in https://github.com/labring/FastGPT/pull/6789
* fix: getquote api auth error by @c121914yu in https://github.com/labring/FastGPT/pull/6792
* doc by @c121914yu in https://github.com/labring/FastGPT/pull/6793
* fix: ts by @c121914yu in https://github.com/labring/FastGPT/pull/6794


**Full Changelog**: https://github.com/labring/FastGPT/compare/v4.14.12...v4.14.13