CVE-2026-10212
2 advisories.
PyPI/astrbot CVE-2026-10212: medium 6.3, EPSS 0.21%
AstrBot: Manipulation of astr_main_agent's session_id parameter leads to authorization bypass
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 4.24.2 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-r6vm-4xwg-w69h
- https://nvd.nist.gov/vuln/detail/CVE-2026-10212
- https://gist.github.com/YLChen-007/91a7f955143099e1747424707dfad0f9
- https://github.com/AstrBotDevs/AstrBot
- https://vuldb.com/cve/CVE-2026-10212
- https://vuldb.com/submit/821923
- https://vuldb.com/vuln/367491
- https://vuldb.com/vuln/367491/cti
CVE-2026-10212 · published · modified · JSON
PyPI/astrbot CVE-2026-10212: medium 6.3, EPSS 0.21%
AstrBot: Manipulation of astr_main_agent's session_id parameter leads to authorization bypass
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 4.24.2 |
Fixed versions
No fixed version in the source.
Sources
- osv: PYSEC-2026-2383
- https://nvd.nist.gov/vuln/detail/CVE-2026-10212
- https://gist.github.com/YLChen-007/91a7f955143099e1747424707dfad0f9
- https://github.com/AstrBotDevs/AstrBot
- https://vuldb.com/cve/CVE-2026-10212
- https://vuldb.com/submit/821923
- https://vuldb.com/vuln/367491
- https://vuldb.com/vuln/367491/cti
- https://pypi.org/project/astrbot
- https://github.com/advisories/GHSA-r6vm-4xwg-w69h
CVE-2026-10212 · published · modified · JSON