TI-2025-31095 CVE-2025-48957 · GHSA-cq37-g2qp-3c2p
AstrBot Has Path Traversal Vulnerability in /api/chat/get_file
Priority HIGH 72
AstrBot is a large language model chatbot and development framework.
Astrbot
Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9
Exploited now
Astrbot records in CISA KEVNo Astrbot vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
4 records
TI-2025-35605 CVE-2025-57698 · GHSA-xrj9-mw57-j34v
AstrBot Project v3.5.22 contains a directory traversal vulnerability.
Priority HIGH 66
AstrBot Project v3.5.22 contains a directory traversal vulnerability.
TI-2025-35604 CVE-2025-57697 · GHSA-vm2f-46xc-5jc3
AstrBot Project v3.5.22 has an arbitrary file read vulnerability in function…
Priority MEDIUM 62
AstrBot Project v3.5.22 has an arbitrary file read vulnerability in function _encode_image_bs64.
TI-2025-35011 CVE-2025-55449 · GHSA-4m32-cjv7-f425
AstrBotDevs AstrBot 3.5.15 has Advanced_System_for_Text_Response_and_Bot_Operations_Tool…
Priority LOW 38
AstrBotDevs AstrBot 3.5.15 has Advanced_System_for_Text_Response_and_Bot_Operations_Tool as the hardcoded private key used to sign a JWT.