Live › vulnerability › CVE-2025-55449
Go to dashboardAstrBot signs its dashboard login tokens with a hard-coded key that is public in the source code. An attacker can forge an admin token, install a malicious Python plugin, and execute arbitrary commands on the host.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 15:18 UTC, 0h before NVD. All times on this page are UTC.
Any AstrBot instance below whose dashboard is publicly reachable is exposed, because the forged token grants plugin installation. Instances that only listen on localhost or sit behind strict network access controls are much less exposed. The advisory says fewer than 2% of deployed instances were still on the affected version before disclosure.
3.5.18| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| astrbot | pypi | < 3.5.18 | 3.5.18 |
| astrbot | vendor | = 3.5.15 | – |
pip show astrbot and confirm the installed version is below 3.5.18astrbot package to 3.5.18 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
AstrBot uses a hard-coded JWT signing key, allowing attackers to execute arbitrary commands by installing a malicious plugin.
AstrBot uses a hard-coded JWT signing key, which allows attackers to bypass the authentication mechanism. Once bypassed, the attacker can install a Python plugin that will be imported here, enabling arbitrary command execution on the target host.
All publicly accessible AstrBot instances are vulnerable.
For more information, please see: CVE-2025-55449-AstrBot-RCE
This vulnerability was first reported on 2025-06-21 and was patched on the same day (2025-06-21).
The vulnerability was publicly disclosed on 2025-11-14. Prior to public disclosure, monitoring from AstrBot Cloud indicated that fewer than 2% of deployed instances were still running the affected version. Therefore, this disclosure is not expected to have a significant impact on existing active instances.
This page as .md · .json · in your agent: get_signal("CVE-2025-55449")
GitHub Advisory Database, CC-BY 4.0 · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.