astrbot records
4 published records for vendor astrbot.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 50%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-125 Out-of-bounds Read1
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-23 Relative Path Traversal1
- CWE-321 Use of Hard-coded Cryptographic Key1
The weakness classes this vendor ships most often: where to look.
CWEAll records
4 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
30Monitor | CVE-2025-57698No exploit | AstrBot Project v3.5.22 contains a directory traversal vulnerability.astrbot · astrbot · CWE-22 | High7.5 | — | 0.8% | Nov 7, 2025 |
30Monitor | CVE-2025-48957No exploit | AstrBot Has Path Traversal Vulnerability in /api/chat/get_fileastrbot · astrbot · CWE-23 | High7.5 | — | 0.7% | Jun 2, 2025 |
29Monitor | CVE-2025-55449Proof of concept | AstrBotDevs AstrBot 3.5.15 has Advanced_System_for_Text_Response_and_Bot_Operations_Tool as the hardcoded private key used to sign a JWT.astrbot · astrbot · CWE-321 | High7.3 | — | 0.2% | May 8, 2026 |
26Monitor | CVE-2025-57697No exploit | AstrBot Project v3.5.22 has an arbitrary file read vulnerability in function _encode_image_bs64.astrbot · astrbot · CWE-125 | Medium6.5 | — | 0.3% | Nov 7, 2025 |
- CVE-2025-5769830Monitor
AstrBot Project v3.5.22 contains a directory traversal vulnerability.
HighCVSS 7.5No exploitEPSS 0%astrbot · astrbotNov 7, 2025
- CVE-2025-4895730Monitor
AstrBot Has Path Traversal Vulnerability in /api/chat/get_file
HighCVSS 7.5No exploitEPSS 0%astrbot · astrbotJun 2, 2025
- CVE-2025-5544929Monitor
AstrBotDevs AstrBot 3.5.15 has Advanced_System_for_Text_Response_and_Bot_Operations_Tool as the hardcoded private key used to sign a JWT.
HighCVSS 7.3Proof of conceptEPSS 0%astrbot · astrbotMay 8, 2026
- CVE-2025-5769726Monitor
AstrBot Project v3.5.22 has an arbitrary file read vulnerability in function _encode_image_bs64.
MediumCVSS 6.5No exploitEPSS 0%astrbot · astrbotNov 7, 2025