Executive brief
AstrBot is an AI agent assistant and development framework used to integrate large language models (LLMs) with various instant messaging platforms. A security vulnerability in its API allows an attacker to force the server to make unauthorized requests to internal or external web services. This could lead to the exposure of sensitive internal data or allow the attacker to interact with other private systems within the organization's network.
Technical details
A Server-Side Request Forgery (SSRF) vulnerability exists in AstrBotDevs AstrBot versions up to and including 4.22.1. The flaw is located within the API endpoint's post_data.get function, which fails to properly validate user-supplied URLs. A remote attacker with low privileges can exploit this by submitting a crafted request, causing the server to perform unintended network requests. This can be used to scan internal networks, access local services, or bypass firewalls. While a public exploit is available, the project maintainers have not yet released a formal patch.
Affected products
- AstrBotDevs AstrBot up to 4.22.1
Timeline
- 2026-04-12: advisory: Initial disclosure via VulDB and NVD
- 2026-04-12: disclosed: Public exploit made available