astrbot 4.26.0b12

Direct Vulnerabilities

Known vulnerabilities in the astrbot package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
M Authorization Bypass Through User-Controlled Key AstrBot is a 易上手的多平台 LLM 聊天机器人及开发框架 Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key via the `astr_main_agent` function in the file `astrbot/core/astr_main_agent.py`. An attacker can gain unauthorized access to resources by manipulating the `session_id` argument remotely. How to fix Authorization Bypass Through User-Controlled Key? There is no fixed version for `AstrBot`.	[0,)
M Directory Traversal AstrBot is a 易上手的多平台 LLM 聊天机器人及开发框架 Affected versions of this package are vulnerable to Directory Traversal via the `Name` argument in the `/api/skills/delete` API endpoint. An attacker can manipulate file paths by submitting crafted input, potentially leading to unauthorized file deletion or modification. How to fix Directory Traversal? There is no fixed version for `AstrBot`.	[0,)
M Incorrect Authorization AstrBot is a 易上手的多平台 LLM 聊天机器人及开发框架 Affected versions of this package are vulnerable to Incorrect Authorization via the `_normalize_rw_path` function. An attacker can gain unauthorized access to resources by exploiting improper authorization checks in this process. How to fix Incorrect Authorization? There is no fixed version for `AstrBot`.	[0,)
M Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') AstrBot is a 易上手的多平台 LLM 聊天机器人及开发框架 Affected versions of this package are vulnerable to Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') via the `_sanitize_prompt_description` function. An attacker can execute unauthorized code or inject malicious input by supplying crafted data to this function. How to fix Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')? There is no fixed version for `AstrBot`.	[0,)
H Arbitrary Code Injection AstrBot is a 易上手的多平台 LLM 聊天机器人及开发框架 Affected versions of this package are vulnerable to Arbitrary Code Injection via the `add_mcp_server` function in the MCP Endpoint component when processing untrusted input in the `command` argument. An attacker can execute arbitrary system commands by supplying crafted input remotely. How to fix Arbitrary Code Injection? There is no fixed version for `AstrBot`.	[0,)
H Server-side Request Forgery (SSRF) AstrBot is a 易上手的多平台 LLM 聊天机器人及开发框架 Affected versions of this package are vulnerable to Server-side Request Forgery (SSRF) via the `post_data.get` function of the API Endpoint component. An attacker can access internal resources or perform unauthorized requests by sending crafted requests to the affected endpoint. How to fix Server-side Request Forgery (SSRF)? There is no fixed version for `AstrBot`.	[0,)
H Arbitrary Code Injection AstrBot is a 易上手的多平台 LLM 聊天机器人及开发框架 Affected versions of this package are vulnerable to Arbitrary Code Injection via the `install_plugin_upload` function. An attacker can execute unauthorized code and potentially compromise the application by uploading a crafted file to the affected endpoint. How to fix Arbitrary Code Injection? There is no fixed version for `AstrBot`.	[0,)

Vulnerability

Vulnerable Version

Authorization Bypass Through User-Controlled Key

AstrBot is a 易上手的多平台 LLM 聊天机器人及开发框架

Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key via the astr_main_agent function in the file astrbot/core/astr_main_agent.py. An attacker can gain unauthorized access to resources by manipulating the session_id argument remotely.

How to fix Authorization Bypass Through User-Controlled Key?