Skip to content
OpenAdvisories

Vendor

AstrBotDevs

21 known vulnerabilities.

Products

AstrBot 21
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.3
    CVE-2026-7579

    AstrBotDevs AstrBot Dashboard auth.py hard-coded credentials

    A security vulnerability has been detected in AstrBotDevs AstrBot up to 4.16.0. This issue affects some unknown processing of the file astrbot/dashboard/routes/auth.py of the component Dashboard. The manipulation leads to hard-coded credentials. It is possibl…

    AstrBotDevs AstrBot astrbot PyPI
  • High 7.5
    CVE-2025-48957

    AstrBot Has Path Traversal Vulnerability in /api/chat/get_file

    AstrBot is a large language model chatbot and development framework. A path traversal vulnerability present in versions 3.4.4 through 3.5.12 may lead to information disclosure, such as API keys for LLM providers, account passwords, and other sensitive data. T…

    AstrBotDevs AstrBot astrbot PyPI