Executive brief
AstrBot Has Path Traversal Vulnerability in /api/chat/get_file
Affected products
- PyPI astrbot
Junglewise Threat Intelligence
CVE-2025-48957: PYSEC-2026-1196 - AstrBot Has Path Traversal Vulnerability in /api/chat/get_file
CVE-2025-48957 · Severity: low · CVSS 3.1 · Published 2026-07-07
Technologies: astrbot (PyPI). Vendors: PyPI.
Related threats
- PYSEC-2026-2382 - AstrBot Makes Use of Hard-coded Password
- PYSEC-2026-2381 - AstrBot has Incomplete Filtering of Special Elements
- PYSEC-2026-1197 - AstrBot has an arbitrary file read vulnerability in function _encode_image_bs64
- PYSEC-2026-1198 - AstrBot contains a directory traversal vulnerability
- AstrBotDevs AstrBot authorization bypass via delimiter injection in session_id