Executive brief
AstrBot has an arbitrary file read vulnerability in function _encode_image_bs64
Affected products
- PyPI astrbot
Junglewise Threat Intelligence
CVE-2025-57697: PYSEC-2026-1197 - AstrBot has an arbitrary file read vulnerability in function _encode_image_bs64
CVE-2025-57697 · Severity: medium · CVSS 4 · Published 2026-07-07
Technologies: astrbot (PyPI). Vendors: PyPI.
Related threats
- PYSEC-2026-2382 - AstrBot Makes Use of Hard-coded Password
- PYSEC-2026-2381 - AstrBot has Incomplete Filtering of Special Elements
- PYSEC-2026-1198 - AstrBot contains a directory traversal vulnerability
- PYSEC-2026-1196 - AstrBot Has Path Traversal Vulnerability in /api/chat/get_file
- AstrBotDevs AstrBot authorization bypass via delimiter injection in session_id