CVE-2025-57698
NoneAstrBot contains a directory traversal vulnerability
CVSS
—
EPSS
0.8%
Published
Nov 7, 2025
CISA due date
—
The record
AstrBot Project v3.5.22 contains a directory traversal vulnerability. The handler function install_plugin_upload of the interface '/plugin/install-upload' parses the filename from the request body provided by the user, and directly uses the filename to assign to file_path without checking the validity of the filename. The variable file_path is then passed as a parameter to the function `file.save`, so that the file in the request body can be saved to any location in the file system through directory traversal.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| PyPI | astrbot | 0 | No fix |
Related vulnerabilities
- GHSA-xrj9-mw57-j34v AstrBot contains a directory traversal vulnerability Same vulnerability
- CVE-2025-55449 AstrBotDevs AstrBot 3.5.15 has Advanced_System_for_Text_Response_and_Bot_Operations_Tool… Also affects astrbot
- GHSA-4m32-cjv7-f425 AstrBot is vulnerable to RCE with hard-coded JWT signing keys Also affects astrbot
- GHSA-vm2f-46xc-5jc3 AstrBot has an arbitrary file read vulnerability in function _encode_image_bs64 Also affects astrbot
- CVE-2025-57697 AstrBot has an arbitrary file read vulnerability in function _encode_image_bs64 Also affects astrbot
- CVE-2026-81163 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')… CWE-22
- CVE-2026-112049 Vita3K before build 4187 contains a path traversal (zip slip) vulnerability in… CWE-22
- CVE-2026-112005 WhoDB 0.104.0 before 0.135.0 contains a path traversal vulnerability that allows remote… CWE-22