Skip to content
OpenAdvisories

Package · PyPI

astrbot

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.3
    CVE-2025-55449 Public exploit

    AstrBot is vulnerable to RCE with hard-coded JWT signing keys

    AstrBotDevs AstrBot 3.5.15 has Advanced_System_for_Text_Response_and_Bot_Operations_Tool as the hardcoded private key used to sign a JWT.

    astrbot PyPI