AstrBotDevs vulnerabilities

CVEs per yearBy the year they were published

1. 20251
2. 202620

Newest CVEs

• CVE-2026-17530

  AstrBotDevs AstrBot Subagent astr_agent_tool_exec.py _build_handoff_toolset authorization

  AstrBotDevs · AstrBot

  Medium5.3
• CVE-2026-17529

  AstrBotDevs AstrBot astr_main_agent.py authorization

  AstrBotDevs · AstrBot

  Medium5.3
• CVE-2026-16077

  AstrBotDevs AstrBot Filesystem Computer-Use Tool fs.py _normalize_rw_path link following

  AstrBotDevs · AstrBot

  Medium4.8
• CVE-2026-16076

  AstrBotDevs AstrBot API open_api.py OpenApiRoute.chat_send authentication spoofing

  AstrBotDevs · AstrBot

  Medium5.3
• CVE-2026-16075

  AstrBotDevs AstrBot session-listing Endpoint open_api.py OpenApiRoute.get_chat_sessions authorization

  AstrBotDevs · AstrBot

  Medium5.3
• CVE-2026-16074

  AstrBotDevs AstrBot Plugin Update plugin.py update_all_plugins server-side request forgery

  AstrBotDevs · AstrBot

  Medium5.3
• CVE-2026-16073

  AstrBotDevs AstrBot T2I Feature base.py NetworkRenderStrategy.render cross site scripting

  AstrBotDevs · AstrBot

  Medium5.1
• CVE-2026-15501

  AstrBotDevs AstrBot MCP Test Endpoint tools.py ToolsRoute.test_mcp_connection server-side request forgery

  AstrBotDevs · AstrBot

  Medium5.3
• CVE-2026-15500

  AstrBotDevs AstrBot market_list Endpoint plugin.py get_online_plugins server-side request forgery

  AstrBotDevs · AstrBot

  Medium5.3
• CVE-2026-15499

  AstrBotDevs AstrBot Scheduled Task cron_tools.py FutureTaskTool.call improper authorization

  AstrBotDevs · AstrBot

  Medium5.3