Executive brief
AstrBot is an AI agent framework and development platform that integrates with various messaging services. A security vulnerability in its dashboard allows an attacker to upload files to unauthorized locations on the server's filesystem. This could allow an attacker to overwrite critical system files, potentially leading to a complete takeover of the server or a disruption of service.
Technical details
A path traversal vulnerability exists in the `post_file` function within `astrbot/dashboard/routes/chat.py`. The application fails to sanitize the `filename` argument provided in multipart/form-data uploads, passing it directly to `os.path.join()` and subsequently `file.save()`. An authenticated attacker (or one using default credentials) can provide a filename containing traversal sequences (e.g., `../../`) to write files outside of the intended attachments directory. This can be leveraged to achieve remote code execution by overwriting application scripts or configuration files. The issue is fixed in version 4.23.6 by implementing proper filename sanitization and removing NUL bytes.
Affected products
- AstrBotDevs AstrBot < 4.23.6
Timeline
- 2026-03-21: other: Vulnerability details shared via GitHub Gist
- 2026-05-17: disclosed: CVE-2026-8754 published
- 2026-05-17: advisory
- 2026-05-23: patched: GitHub Advisory reviewed and patch confirmed in 4.23.6