Is CVE-2026-16074 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-16074 being exploited in the wild.

How severe is CVE-2026-16074?

Medium severity, with a CVSS score of 6.3, published 17 July 2026.

Which products and versions are affected?

AstrBotDevs AstrBot up to 4.25.2.

Is there a fix for CVE-2026-16074?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-16074 attacked?

It is attacked over the network, in a network appliance.

Am I affected by CVE-2026-16074?

Check whether anything you run is named in the advisory. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-16074: AstrBotDevs AstrBot SSRF in Plugin Update Handler

CVE-2026-16074 · Severity: medium · CVSS 6.3 · Published 2026-07-17

AstrBot, a chatbot management platform, contains a security flaw in its plugin update system. An authorized user can trick the server into making unauthorized network requests to internal or external systems. This could allow an attacker to scan internal networks, bypass firewalls, or access sensitive data from other services running in the same environment.

Quick answers

Is CVE-2026-16074 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-16074 being exploited in the wild.
How severe is CVE-2026-16074?: Medium severity, with a CVSS score of 6.3, published 17 July 2026.
Which products and versions are affected?: AstrBotDevs AstrBot up to 4.25.2.
Is there a fix for CVE-2026-16074?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-16074 attacked?: It is attacked over the network, in a network appliance.
Am I affected by CVE-2026-16074?: Check whether anything you run is named in the advisory. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A Server-Side Request Forgery (SSRF) vulnerability exists in AstrBot versions up to 4.25.2 within the `update_plugin` and `update_all_plugins` functions in `astrbot/dashboard/routes/plugin.py`. The application fails to validate the `download_url`, `download_urls`, and `proxy` parameters before passing them to the `httpx` client for file retrieval. An authenticated attacker can provide a malicious URL or proxy string, causing the server to perform outbound HTTP GET requests to arbitrary hosts, including internal loopback addresses or private network resources. The vulnerability is present because the application follows redirects and lacks an allowlist for schemes or IP ranges. As of the advisory date, the vendor has not responded to the disclosure.

Affected products

AstrBotDevs AstrBot up to 4.25.2

Timeline

2026-06-09: disclosed: Initial discovery and PoC creation by researcher.
2026-07-17: advisory: Public disclosure of CVE-2026-16074.

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.