Executive brief
AstrBot Makes Use of Hard-coded Password
Affected products
- PyPI astrbot
Junglewise Threat Intelligence
CVE-2026-7579: PYSEC-2026-2382 - AstrBot Makes Use of Hard-coded Password
CVE-2026-7579 · Severity: low · CVSS 3.1 · Published 2026-07-13
Technologies: astrbot (PyPI). Vendors: PyPI.
Related threats
- PYSEC-2026-2381 - AstrBot has Incomplete Filtering of Special Elements
- PYSEC-2026-1197 - AstrBot has an arbitrary file read vulnerability in function _encode_image_bs64
- PYSEC-2026-1198 - AstrBot contains a directory traversal vulnerability
- PYSEC-2026-1196 - AstrBot Has Path Traversal Vulnerability in /api/chat/get_file
- AstrBotDevs AstrBot authorization bypass via delimiter injection in session_id