CVE-2026-10210

Name of the Vulnerable Software and Affected Versions AstrBot version 4.23.6

Description A remote injection issue exists in the sanitize prompt description() function within the astrbot/core/skills/skill manager.py file. This flaw allows an attacker to perform injection attacks remotely.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting the use of the sanitize prompt description() function to minimize the risk of exploitation.