CVE-2025-57698 Details
Description
AstrBot Project v3.5.22 contains a directory traversal vulnerability. The handler function install_plugin_upload of the interface '/plugin/install-upload' parses the filename from the request body provided by the user, and directly uses the filename to assign to file_path without checking the validity of the filename. The variable file_path is then passed as a parameter to the function `file.save`, so that the file in the request body can be saved to any location in the file system through directory traversal.
A directory traversal vulnerability exists in AstrBot Project version 3.5.22. The issue arises in the 'install_plugin_upload' function of the '/plugin/install-upload' interface, where the filename is parsed from the user-provided request body and directly assigned to 'file_path' without validation. This allows attackers to manipulate the filename to traverse directories and save files to arbitrary locations on the filesystem. The vulnerability is exploited by uploading a file through the interface, with the filename crafted to include traversal sequences, thereby writing the file to a location outside the intended directory.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Nov 12, 2025References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/DYX217/vulnerability-explore/blob/main/2/README.md | [email protected] | ExploitThird Party Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | CISA-ADP |
Affected Products
| Product | Versions |
|---|---|
| astrbot astrbot | 3.5.22 |
CPE
Remediation
| |
Change History
5 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Dec 5, 2025 | Initial Analysis | [email protected] |
| Nov 12, 2025 | CVE Modified | CISA-ADP |
| Nov 7, 2025 | New CVE Received | [email protected] |