CVE Browser

AstrBotDevs AstrBot Subagent astr_agent_tool_exec.py _build_handoff_toolset authorization

AstrBotDevs AstrBot astr_main_agent.py authorization

AstrBotDevs AstrBot Filesystem Computer-Use Tool fs.py _normalize_rw_path link following

AstrBotDevs AstrBot API open_api.py OpenApiRoute.chat_send authentication spoofing

AstrBotDevs AstrBot session-listing Endpoint open_api.py OpenApiRoute.get_chat_sessions authorization

AstrBotDevs AstrBot Plugin Update plugin.py update_all_plugins server-side request forgery

AstrBotDevs AstrBot T2I Feature base.py NetworkRenderStrategy.render cross site scripting

AstrBotDevs AstrBot MCP Test Endpoint tools.py ToolsRoute.test_mcp_connection server-side request forgery

AstrBotDevs AstrBot market_list Endpoint plugin.py get_online_plugins server-side request forgery

AstrBotDevs AstrBot Scheduled Task cron_tools.py FutureTaskTool.call improper authorization

AstrBotDevs AstrBot API Endpoint delete path traversal

AstrBotDevs AstrBot astr_main_agent.py astr_main_agent authorization

AstrBotDevs AstrBot fs.py _normalize_rw_path authorization

AstrBotDevs AstrBot skill_manager.py _sanitize_prompt_description injection

AstrBotDevs AstrBot File Upload chat.py post_file path traversal

AstrBotDevs AstrBot Dashboard auth.py hard-coded credentials

AstrBotDevs AstrBot Dashboard API t2i.py create_template special elements used in a template engine

AstrBotDevs AstrBot API Endpoint post_data.get server-side request forgery

AstrBotDevs AstrBot MCP Endpoint tools.py add_mcp_server command injection

AstrBotDevs AstrBot install-upload Endpoint plugin.py install_plugin_upload sandbox

AstrBot Has Path Traversal Vulnerability in /api/chat/get_file