← Vulnerability feed

Vulnerability record · CVE-2025-55449 · published 8 May 2026

CVE-2025-55449: Astrbot vulnerability

Astrbot · Astrbot

AstrBotDevs AstrBot 3.5.15 has Advanced_System_for_Text_Response_and_Bot_Operations_Tool as the hardcoded private key used to sign a JWT.

7.3 CVSS 3.1 High EPSS 0.28% · top 81.6% CWE-321 · CWE-321
7.3CVSS 3.1 base score
0.28%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
2References, 1 tagged exploit
17 Jun 2026Last modified by NVD

Description

AstrBotDevs AstrBot 3.5.15 has Advanced_System_for_Text_Response_and_Bot_Operations_Tool as the hardcoded private key used to sign a JWT.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://github.com/AstrBotDevs/AstrBot Product
https://github.com/Marven11/CVE-2025-55449-AstrBot-RCE ExploitThird Party Advisory

Track CVE-2025-55449 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.5CVE-2025-57698Astrbot path traversal vulnerabilityAstrBot Project v3.5.22 contains a directory traversal vulnerability. The handler function install_plugin_upload of the interface '/plugin/install-up…EPSS 0.78%7.5CVE-2025-48957Astrbot relative path traversal vulnerabilityAstrBot is a large language model chatbot and development framework. A path traversal vulnerability present in versions 3.4.4 through 3.5.12 may lead…EPSS 0.74%6.5CVE-2025-57697Astrbot out-of-bounds read vulnerabilityAstrBot Project v3.5.22 has an arbitrary file read vulnerability in function _encode_image_bs64. Since the _encode_image_bs64 function defined in ent…EPSS 0.32%9.8CVE-2025-30406Gladinet CentreStack hardcoded machineKey deserialization RCEGladinet CentreStack through 16.1.10296.56315 (fixed in 16.4.10315.56368) uses a hardcoded machineKey in the portal's web.config, allowing deserializ…KEVEPSS 94%analysed9.8CVE-2016-4437Apache Shiro hardcoded remember-me cipher key enables code executionApache Shiro before 1.2.5 uses a default cipher key for the "remember me" feature when no key is configured, allowing attackers to forge or decrypt r…KEVEPSS 93%analysed

Source: NIST National Vulnerability Database (record CVE-2025-55449), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.