AstrBotDevs/AstrBot

🚨*CVE* CVE-2026-6118 A vulnerability was determined in AstrBotDevs AstrBot up to 4.22.1. Impacted is the function add_mcp_server of the file astrbot/dashboard/routes/tools.py of the compone… cve.org/CVERecord?id=CVE-202… ----- Traducción: CVE-2026-6118 Se … infoflow.cloud `

Returned by a high-confidence repo query and contains a visible project phrase, but the exact URL, slug, or package name was not visible.

🚨*CVE* CVE-2026-6117 A vulnerability was found in AstrBotDevs AstrBot up to 4.22.1. This issue affects the function install_plugin_upload of the file astrbot/dashboard/routes/plugin.py of t… cve.org/CVERecord?id=CVE-202… ----- Traducción: CVE-2026-6117 Se … infoflow.cloud `

Returned by a high-confidence repo query and contains a visible project phrase, but the exact URL, slug, or package name was not visible.

🚨*CVE* CVE-2026-6119 A vulnerability was identified in AstrBotDevs AstrBot up to 4.22.1. The affected element is the function post_data.get of the component API Endpoint. Such manipulation … cve.org/CVERecord?id=CVE-202… ----- Traducción: CVE-2026-6119 Se … infoflow.cloud `

Returned by a high-confidence repo query and contains a visible project phrase, but the exact URL, slug, or package name was not visible.

CVE-2026-6117 A vulnerability was found in AstrBotDevs AstrBot up to 4.22.1. This issue affects the function install_plugin_upload of the file astrbot/dashboard/routes/plugin.py of t… cve.org/CVERecord?id=CVE-202…

Returned by a high-confidence repo query and contains a visible project phrase, but the exact URL, slug, or package name was not visible.