PT-2026-32151
CVE-2026-6119
·
Published
2026-04-12
·
Updated
2026-04-12
Description by
CVSS 2.0
6.5
MediumMetricsAV:N/AC:L/Au:S/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
AstrBot versions up to 4.22.1
Description
A server-side request forgery exists in the
post data.get function of the API Endpoint component in AstrBot. This manipulation can be performed remotely. The exploit is publicly available.Recommendations
Update AstrBot to a version newer than 4.22.1.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾