astrbot 4.27.4

Direct Vulnerabilities

Known vulnerabilities in the astrbot package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
M Cross-site Scripting (XSS) AstrBot is a 易上手的多平台 LLM 聊天机器人及开发框架 Affected versions of this package are vulnerable to Cross-site Scripting (XSS) in the `render` function of the T2I Feature component. An attacker can inject malicious scripts by supplying crafted input, which may be executed in the context of another user when the affected process handles the input. How to fix Cross-site Scripting (XSS)? There is no fixed version for `AstrBot`.	[0,)
M Server-side Request Forgery (SSRF) AstrBot is a 易上手的多平台 LLM 聊天机器人及开发框架 Affected versions of this package are vulnerable to Server-side Request Forgery (SSRF) via the `ToolsRoute.test_mcp_connection` function. An attacker can make unauthorized requests to internal or external systems by supplying crafted input to the `mcp_server_config.url` parameter. How to fix Server-side Request Forgery (SSRF)? There is no fixed version for `AstrBot`.	[0,)
M Improper Authorization AstrBot is a 易上手的多平台 LLM 聊天机器人及开发框架 Affected versions of this package are vulnerable to Improper Authorization via the `FutureTaskTool.call` function in the Scheduled Task Handler process. An attacker can gain unauthorized access to sensitive operations by manipulating the `payload["note"]` argument remotely. How to fix Improper Authorization? There is no fixed version for `AstrBot`.	[0,)
M Server-side Request Forgery (SSRF) AstrBot is a 易上手的多平台 LLM 聊天机器人及开发框架 Affected versions of this package are vulnerable to Server-side Request Forgery (SSRF) via the `get_online_plugins` function in the market_list Endpoint when processing the `custom_registry` argument. An attacker can induce the server to make arbitrary HTTP requests by supplying crafted input remotely. How to fix Server-side Request Forgery (SSRF)? There is no fixed version for `AstrBot`.	[0,)
M Authorization Bypass Through User-Controlled Key AstrBot is a 易上手的多平台 LLM 聊天机器人及开发框架 Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key via the `astr_main_agent` function in the file `astrbot/core/astr_main_agent.py`. An attacker can gain unauthorized access to resources by manipulating the `session_id` argument remotely. How to fix Authorization Bypass Through User-Controlled Key? There is no fixed version for `AstrBot`.	[0,)
M Directory Traversal AstrBot is a 易上手的多平台 LLM 聊天机器人及开发框架 Affected versions of this package are vulnerable to Directory Traversal via the `Name` argument in the `/api/skills/delete` API endpoint. An attacker can manipulate file paths by submitting crafted input, potentially leading to unauthorized file deletion or modification. How to fix Directory Traversal? There is no fixed version for `AstrBot`.	[0,)
M Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') AstrBot is a 易上手的多平台 LLM 聊天机器人及开发框架 Affected versions of this package are vulnerable to Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') via the `_sanitize_prompt_description` function. An attacker can execute unauthorized code or inject malicious input by supplying crafted data to this function. How to fix Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')? There is no fixed version for `AstrBot`.	[0,)
H Arbitrary Code Injection AstrBot is a 易上手的多平台 LLM 聊天机器人及开发框架 Affected versions of this package are vulnerable to Arbitrary Code Injection via the `add_mcp_server` function in the MCP Endpoint component when processing untrusted input in the `command` argument. An attacker can execute arbitrary system commands by supplying crafted input remotely. How to fix Arbitrary Code Injection? There is no fixed version for `AstrBot`.	[0,)
H Server-side Request Forgery (SSRF) AstrBot is a 易上手的多平台 LLM 聊天机器人及开发框架 Affected versions of this package are vulnerable to Server-side Request Forgery (SSRF) via the `post_data.get` function of the API Endpoint component. An attacker can access internal resources or perform unauthorized requests by sending crafted requests to the affected endpoint. How to fix Server-side Request Forgery (SSRF)? There is no fixed version for `AstrBot`.	[0,)

Vulnerability

Vulnerable Version

Cross-site Scripting (XSS)

AstrBot is a 易上手的多平台 LLM 聊天机器人及开发框架

Affected versions of this package are vulnerable to Cross-site Scripting (XSS) in the render function of the T2I Feature component. An attacker can inject malicious scripts by supplying crafted input, which may be executed in the context of another user when the affected process handles the input.

How to fix Cross-site Scripting (XSS)?