Astrbot vulnerabilities
We track 1 vulnerability in Astrbot products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on November 7, 2025.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Astrbot vulnerabilities
- 7.5 High severity
Astrbot: Improper Limitation of a Pathname to a Restricted Directory
AstrBot Project v3.5.22 contains a directory traversal vulnerability. The handler function install_plugin_upload of the interface '/plugin/install-upload' parses the filename from the request body provided by the user, and directly uses the filename to assign