CVE-2026-8754
2 advisories.
PyPI/astrbot CVE-2026-8754: medium 6.3, EPSS 0.43%
AstrBot: File upload vulnerability in the function post_file of the file astrbot/dashboard/routes/chat.py
Action: Upgrade astrbot to 4.23.6 or later.
pip install astrbot==4.23.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.23.6 | - |
Fixed versions
| 4.23.6 |
Sources
- osv: GHSA-f63h-wc26-pmvc
- https://nvd.nist.gov/vuln/detail/CVE-2026-8754
- https://github.com/AstrBotDevs/AstrBot/commit/aaec41e5054569ceaa1113593a34da7568e2d211
- https://gist.github.com/YLChen-007/054415c2b63e58813328bc879a90c504
- https://github.com/AstrBotDevs/AstrBot
- https://github.com/AstrBotDevs/AstrBot/releases/tag/v4.23.6
- https://vuldb.com/submit/811172
- https://vuldb.com/vuln/364381
- https://vuldb.com/vuln/364381/cti
CVE-2026-8754 · published · modified · JSON
PyPI/astrbot CVE-2026-8754: medium 6.3, EPSS 0.43%
AstrBot: File upload vulnerability in the function post_file of the file astrbot/dashboard/routes/chat.py
Action: Upgrade astrbot to 4.23.6 or later.
pip install astrbot==4.23.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.23.6 | - |
Fixed versions
| 4.23.6 |
Sources
- osv: PYSEC-2026-2380
- https://nvd.nist.gov/vuln/detail/CVE-2026-8754
- https://github.com/AstrBotDevs/AstrBot/commit/aaec41e5054569ceaa1113593a34da7568e2d211
- https://gist.github.com/YLChen-007/054415c2b63e58813328bc879a90c504
- https://github.com/AstrBotDevs/AstrBot
- https://github.com/AstrBotDevs/AstrBot/releases/tag/v4.23.6
- https://vuldb.com/submit/811172
- https://vuldb.com/vuln/364381
- https://vuldb.com/vuln/364381/cti
- https://pypi.org/project/astrbot
- https://github.com/advisories/GHSA-f63h-wc26-pmvc
CVE-2026-8754 · published · modified · JSON