CVE-2026-6117

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-6117", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "state": "PUBLISHED", "assignerShortName": "VulDB", "dateReserved": "2026-04-11T08:50:17.695Z", "datePublished": "2026-04-12T04:30:12.395Z", "dateUpdated": "2026-04-15T15:18:45.908Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-04-12T04:30:12.395Z"}, "title": "AstrBotDevs AstrBot install-upload Endpoint plugin.py install_plugin_upload sandbox", "problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-265", "lang": "en", "description": "Sandbox Issue"}]}, {"descriptions": [{"type": "CWE", "cweId": "CWE-264", "lang": "en", "description": "Improper Access Controls"}]}], "affected": [{"vendor": "AstrBotDevs", "product": "AstrBot", "versions": [{"version": "4.22.0", "status": "affected"}, {"version": "4.22.1", "status": "affected"}], "cpes": ["cpe:2.3:a:astrbot:astrbot:*:*:*:*:*:*:*:*"], "modules": ["install-upload Endpoint"]}], "descriptions": [{"lang": "en", "value": "A vulnerability was found in AstrBotDevs AstrBot up to 4.22.1. This issue affects the function install_plugin_upload of the file astrbot/dashboard/routes/plugin.py of the component install-upload Endpoint. The manipulation of the argument File results in sandbox issue. The attack can be executed remotely. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet."}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 5.3, "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P", "baseSeverity": "MEDIUM"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 6.3, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R", "baseSeverity": "MEDIUM"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 6.3, "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R", "baseSeverity": "MEDIUM"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 6.5, "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR"}}], "timeline": [{"time": "2026-04-11T00:00:00.000Z", "lang": "en", "value": "Advisory disclosed"}, {"time": "2026-04-11T02:00:00.000Z", "lang": "en", "value": "VulDB entry created"}, {"time": "2026-04-11T10:55:29.000Z", "lang": "en", "value": "VulDB entry last update"}], "credits": [{"lang": "en", "value": "Yu_Bao (VulDB User)", "type": "reporter"}, {"lang": "en", "value": "VulDB CNA Team", "type": "coordinator"}], "references": [{"url": "https://vuldb.com/vuln/356977", "name": "VDB-356977 | AstrBotDevs AstrBot install-upload Endpoint plugin.py install_plugin_upload sandbox", "tags": ["vdb-entry", "technical-description"]}, {"url": "https://vuldb.com/vuln/356977/cti", "name": "VDB-356977 | CTI Indicators (IOB, IOC, TTP, IOA)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/submit/792653", "name": "Submit #792653 | AstrBotDevs AstrBot 4.22.1 Arbitrary Code Execution via Plugin Upload", "tags": ["third-party-advisory"]}, {"url": "https://github.com/AstrBotDevs/AstrBot/issues/7168", "tags": ["exploit", "issue-tracking"]}, {"url": "https://github.com/AstrBotDevs/AstrBot/", "tags": ["product"]}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-04-15T15:18:31.657429Z", "id": "CVE-2026-6117", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-15T15:18:45.908Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-6117", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-04-15T15:18:31.657429Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-15T15:18:40.510Z"}}], "cna": {"title": "AstrBotDevs AstrBot install-upload Endpoint plugin.py install_plugin_upload sandbox", "credits": [{"lang": "en", "type": "reporter", "value": "Yu_Bao (VulDB User)"}, {"lang": "en", "type": "coordinator", "value": "VulDB CNA Team"}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 6.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 6.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 6.5, "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR"}}], "affected": [{"cpes": ["cpe:2.3:a:astrbot:astrbot:*:*:*:*:*:*:*:*"], "vendor": "AstrBotDevs", "modules": ["install-upload Endpoint"], "product": "AstrBot", "versions": [{"status": "affected", "version": "4.22.0"}, {"status": "affected", "version": "4.22.1"}]}], "timeline": [{"lang": "en", "time": "2026-04-11T00:00:00.000Z", "value": "Advisory disclosed"}, {"lang": "en", "time": "2026-04-11T02:00:00.000Z", "value": "VulDB entry created"}, {"lang": "en", "time": "2026-04-11T10:55:29.000Z", "value": "VulDB entry last update"}], "references": [{"url": "https://vuldb.com/vuln/356977", "name": "VDB-356977 | AstrBotDevs AstrBot install-upload Endpoint plugin.py install_plugin_upload sandbox", "tags": ["vdb-entry", "technical-description"]}, {"url": "https://vuldb.com/vuln/356977/cti", "name": "VDB-356977 | CTI Indicators (IOB, IOC, TTP, IOA)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/submit/792653", "name": "Submit #792653 | AstrBotDevs AstrBot 4.22.1 Arbitrary Code Execution via Plugin Upload", "tags": ["third-party-advisory"]}, {"url": "https://github.com/AstrBotDevs/AstrBot/issues/7168", "tags": ["exploit", "issue-tracking"]}, {"url": "https://github.com/AstrBotDevs/AstrBot/", "tags": ["product"]}], "descriptions": [{"lang": "en", "value": "A vulnerability was found in AstrBotDevs AstrBot up to 4.22.1. This issue affects the function install_plugin_upload of the file astrbot/dashboard/routes/plugin.py of the component install-upload Endpoint. The manipulation of the argument File results in sandbox issue. The attack can be executed remotely. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-265", "description": "Sandbox Issue"}]}, {"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-264", "description": "Improper Access Controls"}]}], "providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-04-12T04:30:12.395Z"}}}, "cveMetadata": {"cveId": "CVE-2026-6117", "state": "PUBLISHED", "dateUpdated": "2026-04-15T15:18:45.908Z", "dateReserved": "2026-04-11T08:50:17.695Z", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "datePublished": "2026-04-12T04:30:12.395Z", "assignerShortName": "VulDB"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"cpes": ["cpe:2.3:a:astrbot:astrbot:*:*:*:*:*:*:*:*"], "modules": ["install-upload Endpoint"], "product": "AstrBot", "vendor": "AstrBotDevs", "versions": [{"status": "affected", "version": "4.22.0"}, {"status": "affected", "version": "4.22.1"}]}], "source": "cna@vuldb.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A vulnerability was found in AstrBotDevs AstrBot up to 4.22.1. This issue affects the function install_plugin_upload of the file astrbot/dashboard/routes/plugin.py of the component install-upload Endpoint. The manipulation of the argument File results in sandbox issue. The attack can be executed remotely. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet."}, {"lang": "es", "value": "Se encontr\u00f3 una vulnerabilidad en AstrBotDevs AstrBot hasta la versi\u00f3n 4.22.1. Este problema afecta a la funci\u00f3n install_plugin_upload del archivo astrbot/dashboard/routes/plugin.py del componente install-upload Endpoint. La manipulaci\u00f3n del argumento File resulta en un problema de sandbox. El ataque puede ejecutarse de forma remota. El exploit se ha hecho p\u00fablico y podr\u00eda usarse. Se inform\u00f3 al proyecto del problema con antelaci\u00f3n a trav\u00e9s de un informe de problema, pero a\u00fan no ha respondido."}], "id": "CVE-2026-6117", "lastModified": "2026-10-26T22:10:00.163", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "PARTIAL", "baseScore": 6.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 8.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "cna@vuldb.com", "type": "Secondary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 6.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 3.4, "source": "cna@vuldb.com", "type": "Secondary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 2.1, "baseSeverity": "LOW", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "PROOF_OF_CONCEPT", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "LOW", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "LOW", "vulnConfidentialityImpact": "LOW", "vulnIntegrityImpact": "LOW", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "cna@vuldb.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-6117", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-04-15T15:18:31.657429Z", "version": "2.0.3"}}]}, "published": "2026-04-12T05:16:01.287", "references": [{"source": "cna@vuldb.com", "url": "https://github.com/AstrBotDevs/AstrBot/"}, {"source": "cna@vuldb.com", "url": "https://github.com/AstrBotDevs/AstrBot/issues/7168"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/submit/792653"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/vuln/356977"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/vuln/356977/cti"}], "sourceIdentifier": "cna@vuldb.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-264"}, {"lang": "en", "value": "CWE-265"}], "source": "cna@vuldb.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "4.22.0"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "4.22.1"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "AstrBot", "source": "cna", "vendor": "AstrBotDevs"}, "product": "astrbot", "vendor": "astrbot"}], "analysis": {"en": {"generated_at": "2026-04-12T06:50:45.948942+00:00", "value": {"mitigation_remediation": ["Upgrade AstrBot to a version newer than 4.22.1 as soon as it is available.", "Restrict network access to the install-upload endpoint using firewall rules or access control lists.", "Monitor system logs for unexpected plugin upload activity and respond if suspicious patterns are detected."], "summary": {"action": "Apply Patch", "impact": "Potential code execution via sandbox escape"}, "threat_synthesis": {"affected_systems": "The flaw impacts AstrBotDevs AstrBot versions up to 4.22.1. Users of any older release should verify the installed version and plan to upgrade once a fix is released. No newer versions are listed as affected, so a version newer than 4.22.1 is presumed safe unless future releases reintroduce the issue.", "description_and_impact": "A file upload endpoint in AstrBot\u2019s dashboard allows the modification of the File argument, which the application processes without adequate sandbox protection. By manipulating this argument, an attacker can escape the intended sandbox environment and potentially execute arbitrary code on the server. The vulnerability is exploitable remotely through the web interface and has an publicly available exploit. The description does not confirm that the sandbox escape immediately results in code execution, but it clearly indicates a path for execution beyond normal boundaries.", "risk_and_exploitability": "The CVSS score of 5.3 reflects moderate severity. No EPSS score is available, and the vulnerability is not cataloged in CISA\u2019s KEV list. Because the attack vector is remote and the exploit is publicly disclosed, the likelihood of exploitation is non\u2011negligible. Administrators should treat the exposed sandbox as a tangible risk to service integrity and potential confidentiality breaches."}}}}, "created": "2026-04-13T12:41:36.234611+00:00", "updated": "2026-04-13T12:56:16.563423+00:00", "vendors": ["astrbot", "astrbot$PRODUCT$astrbot"]}