# CVE-2026-8754: AstrBotDevs AstrBot path traversal in file upload handler

Source: https://junglewise.ai/threats/cve-2026-8754-astrbotdevs-astrbot-path-traversal-in-file-upload-handler  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-05-17. Updated: 2026-05-23  
License: CC BY 4.0 with a link back

CVE-2026-8754 · Severity: medium · CVSS 6.3 · Published 2026-05-17

AstrBot is an AI agent framework and development platform that integrates with various messaging services. A security vulnerability in its dashboard allows an attacker to upload files to unauthorized locations on the server's filesystem. This could allow an attacker to overwrite critical system files, potentially leading to a complete takeover of the server or a disruption of service.

Technologies: [astrbot (PyPI)](https://junglewise.ai/threats/technologies/astrbot). Vendors: [PyPI](https://junglewise.ai/threats/vendors/pypi).

## Quick answers

**Is CVE-2026-8754 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-8754 being exploited in the wild.

**How severe is CVE-2026-8754?** Medium severity, with a CVSS score of 6.3, published 17 May 2026.

**Which products and versions are affected?** astrbot (PyPI) < 4.23.6, ECOSYSTEM:introduced=0,fixed=4.23.6.

**Is there a fix for CVE-2026-8754?** Yes. astrbot (PyPI): upgrade to 4.23.6 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-8754 attacked?** It is attacked over the network, in a software library.

**Am I affected by CVE-2026-8754?** Check whether you run astrbot (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- astrbot (PyPI): upgrade to 4.23.6 or later

  ```sh
  pip install "astrbot>=4.23.6"
  ```


## Technical details

A path traversal vulnerability exists in the `post_file` function within `astrbot/dashboard/routes/chat.py`. The application fails to sanitize the `filename` argument provided in multipart/form-data uploads, passing it directly to `os.path.join()` and subsequently `file.save()`. An authenticated attacker (or one using default credentials) can provide a filename containing traversal sequences (e.g., `../../`) to write files outside of the intended attachments directory. This can be leveraged to achieve remote code execution by overwriting application scripts or configuration files. The issue is fixed in version 4.23.6 by implementing proper filename sanitization and removing NUL bytes.

## Affected products

- AstrBotDevs AstrBot < 4.23.6

## Identifiers

- CVE-2026-8754
- GHSA-f63h-wc26-pmvc
- PYSEC-2026-2380

## Timeline

- 2026-03-21: other: Vulnerability details shared via GitHub Gist
- 2026-05-17: disclosed: CVE-2026-8754 published
- 2026-05-17: advisory
- 2026-05-23: patched: GitHub Advisory reviewed and patch confirmed in 4.23.6

## References

- [https://github.com/AstrBotDevs/AstrBot/commit/aaec41e5054569ceaa1113593a34da7568e2d211](https://github.com/AstrBotDevs/AstrBot/commit/aaec41e5054569ceaa1113593a34da7568e2d211)
- [https://gist.github.com/YLChen-007/054415c2b63e58813328bc879a90c504](https://gist.github.com/YLChen-007/054415c2b63e58813328bc879a90c504)
- [https://github.com/AstrBotDevs/AstrBot](https://github.com/AstrBotDevs/AstrBot)
- [https://github.com/AstrBotDevs/AstrBot/releases/tag/v4.23.6](https://github.com/AstrBotDevs/AstrBot/releases/tag/v4.23.6)
- [https://vuldb.com/submit/811172](https://vuldb.com/submit/811172)

## Related threats

- [PYSEC-2026-1196 - AstrBot Has Path Traversal Vulnerability in /api/chat/get_file](https://junglewise.ai/threats/cve-2025-48957-astrbot-has-path-traversal-vulnerability-in-api-chat-get-file)
- [AstrBotDevs AstrBot authorization bypass via delimiter injection in session_id](https://junglewise.ai/threats/cve-2026-10212-astrbotdevs-astrbot-authorization-bypass-via-delimiter-injection)
- [AstrBotDevs AstrBot hardcoded JWT secret key](https://junglewise.ai/threats/cve-2025-55449-astrbot-hard-coded-jwt-key-authentication-bypass-and-rce)
- [PYSEC-2026-2382 - AstrBot Makes Use of Hard-coded Password](https://junglewise.ai/threats/cve-2026-7579-astrbot-makes-use-of-hard-coded-password)
- [PYSEC-2026-2381 - AstrBot has Incomplete Filtering of Special Elements](https://junglewise.ai/threats/cve-2026-6984-astrbot-has-incomplete-filtering-of-special-elements)