CVE-2026-8754 json
AstrBotDevs AstrBot File Upload chat.py post_file path traversal
published 2026-05-17 5 mo ago modified 2026-10-26 13 d ago also GHSA-f63h-wc26-pmvc , PYSEC-2026-2380 , EUVD-2026-30700
- cvss
- 6.3
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.4%
- EPSS 0.4% chance of exploitation in 30 days, percentile 29%
- public exploits
- 0
- none known
Summary
A vulnerability was detected in AstrBotDevs AstrBot up to 4.23.5. Impacted is the function post_file of the file astrbot/dashboard/routes/chat.py of the component File Upload Handler. The manipulation of the argument filename results in path traversal. It is possible to launch the attack remotely. The exploit is now public and may be used. Upgrading to version 4.23.6 is recommended to address this issue. The patch is identified as aaec41e5054569ceaa1113593a34da7568e2d211. You should upgrade the affected component.
Patch / fix
- pypi astrbot 4.23.6
- AstrBotDevs AstrBot 4.23.6
CISA SSVC
- Exploitation
- Proof of concept is public
- Automatable
- no
- Technical impact
- partial
- Assessed
- 5 mo ago
Exploit prediction
0.36% chance of exploitation in the next 30 days, higher than 29% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- vuldb.com https://vuldb.com/submit/811172 referenced PoC, tagged "exploit" by a source, unverified
- gist.github.com https://gist.github.com/YLChen-007/054415c2b63e58813328bc879a90c504 referenced PoC, tagged "exploit" by a source, unverified
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 4.0 | 5.3 | CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P |
| CNA | 3.1 | 6.3 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C |
| CNA | 3.0 | 6.3 | CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C |
| CNA | 2.0 | 6.5 | AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:OF/RC:C |
| CNA | 4.0 | 2.1 | CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
| CNA | 3.1 | 6.3 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L |
| CNA | 2.0 | 6.5 | AV:N/AC:L/Au:S/C:P/I:P/A:P |
| GitHub | 3.1 | 6.3 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L |
| OSV | 3.1 | 6.3 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L |
Affected packages
| ecosystem | package | affected | fixed in |
|---|---|---|---|
| pypi | astrbot | <4.23.6 |
4.23.6 |
Affected products
- AstrBotDevs AstrBot
Classification
- Weakness
-
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory
References
-
github.com
/AstrBotDevs/AstrBot/commit/aaec41e5054569ceaa1113593a34da7568e2d211
patch, web
-
github.com
/AstrBotDevs/AstrBot/releases/tag/v4.23.6
patch, web
-
vuldb.com
/submit/811172
third-party-advisory, exploit, web
-
gist.github.com
/YLChen-007/054415c2b63e58813328bc879a90c504
exploit, web
-
vuldb.com
/vuln/364381
vdb-entry, technical-description, web
-
vuldb.com
/vuln/364381/cti
signature, permissions-required, web
-
github.com
/AstrBotDevs/AstrBot/
product
-
nvd.nist.gov
/vuln/detail/CVE-2026-8754
advisory
-
github.com
/AstrBotDevs/AstrBot
package
-
pypi.org
/project/astrbot
package
-
github.com
/advisories/GHSA-f63h-wc26-pmvc
advisory
Sources
- CVE List CVE-2026-8754
- GitHub Advisory GHSA-f63h-wc26-pmvc
- NVD CVE-2026-8754
- OSV PYSEC-2026-2380
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.