CyberSecBulletin

AstrBotDevs vulnerabilities

We track 2 vulnerabilities in AstrBotDevs products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on May 1, 2026.

2vulnerabilities
0critical
2high
0exploited
7.4average CVSS score

Latest AstrBotDevs vulnerabilities

  • 7.3 High severity

    AstrBot: Use of Hard-coded Password

    CVE-2026-7579AstrBotDevs

    A security vulnerability has been detected in AstrBotDevs AstrBot up to 4.16.0. This issue affects some unknown processing of the file astrbot/dashboard/routes/auth.py of the component Dashboard. The manipulation leads to hard-coded credentials. It is possible

  • 7.5 High severity

    AstrBot: Improper Limitation of a Pathname to a Restricted Directory

    CVE-2025-48957AstrBotDevs

    AstrBot is a large language model chatbot and development framework. A path traversal vulnerability present in versions 3.4.4 through 3.5.12 may lead to information disclosure, such as API keys for LLM providers, account passwords, and other sensitive data. Th