← Vulnerability feed

Vulnerability record · CVE-2025-48957 · published 2 June 2025

CVE-2025-48957: Astrbot relative path traversal vulnerability

Astrbot · Astrbot

AstrBot is a large language model chatbot and development framework. A path traversal vulnerability present in versions 3.4.4 through 3.5.12 may lead to information disclosure, such as API keys for LLM providers, account passwords, and other sensitive data. The vulnerability has been addressed in Pull Request #1676 and is included in version 3.5.13. As a workaround, users can edit the `cmd_config.json` file to disable the dashboard feature as a temporary workaround. However, it is strongly recommended to upgrade to version v3.5.13 or later to fully resolve this issue.

7.5 CVSS 3.1 High EPSS 0.74% · top 47.3% CWE-23 · Relative path traversalCWE-22 · Path traversal
7.5CVSS 3.1 base score
0.74%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
7References, 5 tagged exploit
17 Jun 2026Last modified by NVD

Description

AstrBot is a large language model chatbot and development framework. A path traversal vulnerability present in versions 3.4.4 through 3.5.12 may lead to information disclosure, such as API keys for LLM providers, account passwords, and other sensitive data. The vulnerability has been addressed in Pull Request #1676 and is included in version 3.5.13. As a workaround, users can edit the `cmd_config.json` file to disable the dashboard feature as a temporary workaround. However, it is strongly recommended to upgrade to version v3.5.13 or later to fully resolve this issue.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://github.com/AstrBotDevs/AstrBot/commit/cceadf222c46813c7f41115b40d371e7eb91e492 Patch
https://github.com/AstrBotDevs/AstrBot/issues/1675 ExploitIssue Tracking
https://github.com/AstrBotDevs/AstrBot/pull/1676 ExploitIssue TrackingPatch
https://github.com/AstrBotDevs/AstrBot/security/advisories/GHSA-cq37-g2qp-3c2p ExploitVendor Advisory
https://www.vicarius.io/vsociety/posts/cve-2025-48957-detect-astrbot-dashboard-vulnerability?prevUrl=wizard ExploitThird Party Advisory
https://www.vicarius.io/vsociety/posts/cve-2025-48957-mitigate-astrbot-dashboard-vulnerability?prevUrl=wizard MitigationThird Party Advisory
https://github.com/AstrBotDevs/AstrBot/security/advisories/GHSA-cq37-g2qp-3c2p ExploitVendor Advisory

Track CVE-2025-48957 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.5CVE-2025-57698Astrbot path traversal vulnerabilityAstrBot Project v3.5.22 contains a directory traversal vulnerability. The handler function install_plugin_upload of the interface '/plugin/install-up…EPSS 0.78%7.3CVE-2025-55449Astrbot vulnerabilityAstrBotDevs AstrBot 3.5.15 has Advanced_System_for_Text_Response_and_Bot_Operations_Tool as the hardcoded private key used to sign a JWT.EPSS 0.28%6.5CVE-2025-57697Astrbot out-of-bounds read vulnerabilityAstrBot Project v3.5.22 has an arbitrary file read vulnerability in function _encode_image_bs64. Since the _encode_image_bs64 function defined in ent…EPSS 0.32%6.7CVE-2026-34926Trend Micro Apex One on-premise server directory traversal enables agent code injectionA relative path traversal (CWE-23) in the Apex One on-premise server lets an attacker who already holds administrative credentials on the server modi…KEVEPSS 0.54%analysed7.3CVE-2024-27199JetBrains TeamCity path traversal enables limited admin actionsJetBrains TeamCity before 2023.11.4 is vulnerable to relative path traversal that lets an unauthenticated remote party perform limited administrative…KEVEPSS 100%analysed9.8CVE-2025-64446FortiWeb relative path traversal allows admin command executionFortiWeb contains a relative path traversal flaw (CWE-23) reachable through crafted HTTP or HTTPS requests. Successful exploitation lets an attacker …KEVEPSS 92%analysed7.5CVE-2020-5410Spring Cloud Config Server path traversal exposes arbitrary filesSpring Cloud Config Server versions 2.2.x before 2.2.3, 2.1.x before 2.1.9, and older unsupported releases serve arbitrary configuration files via th…KEVEPSS 96%analysed9.8CVE-2021-40870Aviatrix Controller unauthenticated file upload leads to RCEAviatrix Controller 6.x before 6.5-1804.1922 allows unrestricted upload of a dangerous file type, and directory traversal lets an unauthenticated att…KEVEPSS 93%analysed

Source: NIST National Vulnerability Database (record CVE-2025-48957), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.