AstrBot vulnerabilities

2 known vulnerabilities in AstrBot from AstrBotDevs. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.3 High severity

  AstrBot: Use of Hard-coded Password

  CVE-2026-7579May 1, 2026AstrBotDevs

  A security vulnerability has been detected in AstrBotDevs AstrBot up to 4.16.0. This issue affects some unknown processing of the file astrbot/dashboard/routes/auth.py of the component Dashboard. The manipulation leads to hard-coded credentials. It is possible

• 7.5 High severity

  AstrBot: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2025-48957Jun 2, 2025AstrBotDevs

  AstrBot is a large language model chatbot and development framework. A path traversal vulnerability present in versions 3.4.4 through 3.5.12 may lead to information disclosure, such as API keys for LLM providers, account passwords, and other sensitive data. Th