AstrBotDevs

Records20All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

AstrBotDevs records in CISA KEV

No AstrBotDevs vulnerabilities are listed in CISA KEV.

Records

20 records

TI-2026-06662 CVE-2026-7579 · GHSA-mq9q-25hm-g4gp

AstrBotDevs AstrBot Dashboard auth.py hard-coded credentials

HIGH 70

A security vulnerability has been detected in AstrBotDevs AstrBot up to 4.16.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00288 Published 2026-05-01 No fix listed CWE-259

TI-2026-14380 CVE-2026-17530 · GHSA-3397-vr69-3m3w

AstrBotDevs AstrBot Subagent astr_agent_tool_exec.py _build_handoff_toolset authorization

MEDIUM 57

A security flaw has been discovered in AstrBotDevs AstrBot up to 4.25.5.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00374 Published 2026-07-27 No fix listed CWE-285

TI-2026-14379 CVE-2026-17529 · GHSA-v5vq-g74q-p374

AstrBotDevs AstrBot astr_main_agent.py authorization

MEDIUM 57

A vulnerability was identified in AstrBotDevs AstrBot up to 4.25.5.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00374 Published 2026-07-27 No fix listed CWE-285

TI-2026-13455 CVE-2026-16076 · GHSA-jgf3-cr8w-g5h9

AstrBotDevs AstrBot API open_api.py OpenApiRoute.chat_send authentication spoofing

MEDIUM 57

A vulnerability has been found in AstrBotDevs AstrBot up to 4.25.5.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00506 Published 2026-07-18 No fix listed CWE-287

TI-2026-13454 CVE-2026-16075 · GHSA-p8fw-8mf8-rwq8

AstrBotDevs AstrBot session-listing Endpoint open_api.py OpenApiRoute.get_chat_sessions authorization

MEDIUM 57

A flaw has been found in AstrBotDevs AstrBot up to 4.25.5.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00374 Published 2026-07-18 No fix listed CWE-285

TI-2026-13453 CVE-2026-16074 · GHSA-g69g-pch9-xj9r

AstrBotDevs AstrBot Plugin Update plugin.py update_all_plugins server-side request forgery

MEDIUM 57

A vulnerability was detected in AstrBotDevs AstrBot up to 4.25.2.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00347 Published 2026-07-17 No fix listed CWE-918

TI-2026-13042 CVE-2026-15501 · GHSA-hhgm-hv3h-m233

AstrBotDevs AstrBot MCP Test Endpoint tools.py ToolsRoute.test_mcp_connection server-side request forgery

MEDIUM 57

A security vulnerability has been detected in AstrBotDevs AstrBot up to 4.25.2.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00347 Published 2026-07-12 No fix listed CWE-918

TI-2026-13041 CVE-2026-15500 · GHSA-cxgh-3ffg-vj6h

AstrBotDevs AstrBot market_list Endpoint plugin.py get_online_plugins server-side request forgery

MEDIUM 57

A weakness has been identified in AstrBotDevs AstrBot up to 4.25.2.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00366 Published 2026-07-12 No fix listed CWE-918

TI-2026-13040 CVE-2026-15499 · GHSA-868v-2585-2wv2

AstrBotDevs AstrBot Scheduled Task cron_tools.py FutureTaskTool.call improper authorization

MEDIUM 57

A security flaw has been discovered in AstrBotDevs AstrBot up to 4.25.2.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00347 Published 2026-07-12 No fix listed CWE-266

TI-2026-08951 CVE-2026-10213 · GHSA-pvgx-43cj-688x

AstrBotDevs AstrBot API Endpoint delete path traversal

MEDIUM 57

A security flaw has been discovered in AstrBotDevs AstrBot 4.23.6.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00372 Published 2026-06-01 No fix listed CWE-22

TI-2026-08950 CVE-2026-10212 · GHSA-r6vm-4xwg-w69h

AstrBotDevs AstrBot astr_main_agent.py astr_main_agent authorization

MEDIUM 57

A vulnerability was identified in AstrBotDevs AstrBot 4.24.2.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00211 Published 2026-06-01 No fix listed CWE-285

TI-2026-08949 CVE-2026-10211 · GHSA-c6q5-v72x-3cqq

AstrBotDevs AstrBot fs.py _normalize_rw_path authorization

MEDIUM 57

A vulnerability was determined in AstrBotDevs AstrBot 4.23.6.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00201 Published 2026-06-01 No fix listed CWE-285

TI-2026-08948 CVE-2026-10210 · GHSA-6vvm-92fq-599w

AstrBotDevs AstrBot skill_manager.py _sanitize_prompt_description injection

MEDIUM 57

A vulnerability was found in AstrBotDevs AstrBot 4.23.6.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00228 Published 2026-06-01 No fix listed CWE-707

TI-2026-07693 CVE-2026-8754 · GHSA-f63h-wc26-pmvc

AstrBotDevs AstrBot File Upload chat.py post_file path traversal

MEDIUM 57

A vulnerability was detected in AstrBotDevs AstrBot up to 4.23.5.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00358 Published 2026-05-17 Fixed in 4.23.6 CWE-22

TI-2026-05363 CVE-2026-6119 · GHSA-m686-8xw7-xqg8

AstrBotDevs AstrBot API Endpoint post_data.get server-side request forgery

MEDIUM 57

A vulnerability was identified in AstrBotDevs AstrBot up to 4.22.1.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00257 Published 2026-04-12 No fix listed CWE-918

TI-2026-05362 CVE-2026-6118 · GHSA-g599-67fp-qhgv

AstrBotDevs AstrBot MCP Endpoint tools.py add_mcp_server command injection

MEDIUM 57

A vulnerability was determined in AstrBotDevs AstrBot up to 4.22.1.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.02533 Published 2026-04-12 No fix listed CWE-74

TI-2026-13452 CVE-2026-16073 · GHSA-g248-jp4x-cq55

AstrBotDevs AstrBot T2I Feature base.py NetworkRenderStrategy.render cross site scripting

MEDIUM 56

A security vulnerability has been detected in AstrBotDevs AstrBot up to 4.25.2.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00331 Published 2026-07-17 No fix listed CWE-79

TI-2026-06112 CVE-2026-6984 · GHSA-h3rr-9wqj-v3c6

AstrBotDevs AstrBot Dashboard API t2i.py create_template special elements used in a template engine

MEDIUM 56

A security flaw has been discovered in AstrBotDevs AstrBot up to 4.22.1.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00299 Published 2026-04-25 No fix listed CWE-1336

TI-2026-13456 CVE-2026-16077 · GHSA-78hj-h3pf-359h

AstrBotDevs AstrBot Filesystem Computer-Use Tool fs.py _normalize_rw_path link following

MEDIUM 55

A vulnerability was found in AstrBotDevs AstrBot up to 4.25.5.

CVSS 4.0MEDIUM 4.8 Local Low privileges No interaction EPSS 0.0021 Published 2026-07-18 No fix listed CWE-59

TI-2026-05361 CVE-2026-6117 · GHSA-rf4q-qfjf-vw22

AstrBotDevs AstrBot install-upload Endpoint plugin.py install_plugin_upload sandbox

LOW 23

A vulnerability was found in AstrBotDevs AstrBot up to 4.22.1.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00224 Published 2026-04-12 No fix listed CWE-264

Open these records in search →