CVE-2026-10213

Name of the Vulnerable Software and Affected Versions AstrBotDevs AstrBot version 4.23.6

Description A flaw in the API Endpoint component allows a remote attacker to perform path traversal, which is a technique used to access files and directories that are stored outside the web root folder. This occurs through the manipulation of the Name argument within the '/api/skills/delete' endpoint.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. Avoid using the Name parameter in the '/api/skills/delete' endpoint until the issue is resolved.