CVE-2025-48957 Details
Description
AstrBot is a large language model chatbot and development framework. A path traversal vulnerability present in versions 3.4.4 through 3.5.12 may lead to information disclosure, such as API keys for LLM providers, account passwords, and other sensitive data. The vulnerability has been addressed in Pull Request #1676 and is included in version 3.5.13. As a workaround, users can edit the `cmd_config.json` file to disable the dashboard feature as a temporary workaround. However, it is strongly recommended to upgrade to version v3.5.13 or later to fully resolve this issue.
A path traversal vulnerability has been identified in the AstrBot chatbot framework, specifically in versions 3.4.4 through 3.5.12. This vulnerability allows unauthorized access to files by manipulating the filename parameter in the '/api/chat/get_file' endpoint, potentially leading to the disclosure of sensitive information such as API keys, account passwords, and other confidential data. The issue arises because the filename parameter is not properly sanitized before being used to access files on the server.
Users are advised to upgrade to AstrBot version 3.5.13 or later, where this vulnerability has been patched. Instructions for upgrading can be found in the project's documentation.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Jun 2, 2025References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/AstrBotDevs/AstrBot/security/advisories/GHSA-cq37-g2qp-3c2p | CISA-ADP | ExploitVendor Advisory |
| https://www.vicarius.io/vsociety/posts/cve-2025-48957-detect-astrbot-dashboard-vulnerability?prevUrl=wizard | CVE | ExploitThird Party Advisory |
| https://www.vicarius.io/vsociety/posts/cve-2025-48957-mitigate-astrbot-dashboard-vulnerability?prevUrl=wizard | CVE | MitigationThird Party Advisory |
| https://github.com/AstrBotDevs/AstrBot/commit/cceadf222c46813c7f41115b40d371e7eb91e492 | [email protected] | Patch |
| https://github.com/AstrBotDevs/AstrBot/issues/1675 | [email protected] | ExploitIssue Tracking |
| https://github.com/AstrBotDevs/AstrBot/pull/1676 | [email protected] | ExploitIssue TrackingPatch |
| https://github.com/AstrBotDevs/AstrBot/security/advisories/GHSA-cq37-g2qp-3c2p | [email protected] | ExploitVendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | [email protected] |
| CWE-23 | Relative Path Traversal | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| astrbot astrbot | >= 3.4.4, < 3.5.13 |
CPE
Remediation
| |
Change History
6 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Jun 25, 2025 | Initial Analysis | [email protected] |
| Jun 23, 2025 | CVE Modified | CVE |
| Jun 2, 2025 | CVE Modified | CISA-ADP |
| Jun 2, 2025 | New CVE Received | [email protected] |