CVE-2026-16076— AstrBotDevs AstrBot API open_api.py OpenApiRoute.chat_send authentication spoofing

CVSS 6.3 · Medium EPSS 0.29% · P21 Updated Jul 21, 2026

Possible ATT&CK Techniques 1AI

Affected Version Matrix 6

Vendor	Product	Version Range	Status
AstrBotDevs	AstrBot	`4.25.0`	affected
		`4.25.1`	affected
		`4.25.2`	affected
		`4.25.3`	affected
		`4.25.4`	affected
		`4.25.5`	affected

Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2026-16076

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

AstrBotDevs AstrBot API open_api.py OpenApiRoute.chat_send authentication spoofing

Source: CVE Program / CVE List V5

Vulnerability Description

A vulnerability has been found in AstrBotDevs AstrBot up to 4.25.5. This issue affects the function OpenApiRoute.chat_send of the file astrbot/dashboard/routes/open_api.py of the component API. Such manipulation of the argument Username leads to authentication bypass by spoofing. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Source: CVE Program / CVE List V5

Vulnerability Type

使用欺骗进行的认证绕过

Source: CVE Program / CVE List V5

Vulnerability Title

AstrBot 授权问题漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

AstrBot是AstrBot团队开源的一个多平台 LLM 聊天机器人及开发框架。 AstrBot 4.25.5及之前版本存在授权问题漏洞，该漏洞源于API组件中的OpenApiRoute.chat_send函数对Username参数操作不当，可能导致攻击者通过欺骗绕过身份验证。

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
AstrBotDevs	AstrBot	4.25.0	`cpe:2.3:a:astrbot:astrbot::::::::`

II. Public POCs for CVE-2026-16076

#	POC Description	Source Link	Shenlong Link

AI-Generated POCPremium

No public POC found.

III. Intelligence Information for CVE-2026-16076

请登录查看更多情报信息。

Proof of Concept for CVE-2026-16076 (1)

🔗 AstrBot: AstrBot OpenAPI `username` Spoofing Allows `chat`-Scope API Key Holders to Execute Admin-Only Commands · GitHub Read full article exploit

https://www.cve.org/CVERecord?id=CVE-2026-16076

Same Patch Batch · AstrBotDevs · 2026-07-18 · 3 CVEs total

CVE-2026-16077	5.3 MEDIUM	AstrBotDevs AstrBot Filesystem Computer-Use Tool fs.py _normalize_rw_path link following
CVE-2026-16075	4.3 MEDIUM	AstrBotDevs AstrBot session-listing Endpoint open_api.py OpenApiRoute.get_chat_sessions au

IV. Related Vulnerabilities

Same product: AstrBot

Same vendor: AstrBotDevs

Same weakness: CWE-290

V. Comments for CVE-2026-16076

No comments yet

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2026-16076— AstrBotDevs AstrBot API open_api.py OpenApiRoute.chat_send authentication spoofing

Possible ATT&CK Techniques 1AI

Affected Version Matrix 6

I. Basic Information for CVE-2026-16076

Vulnerability Information

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Affected Products

II. Public POCs for CVE-2026-16076

III. Intelligence Information for CVE-2026-16076

Proof of Concept for CVE-2026-16076 (1)

Same Patch Batch · AstrBotDevs · 2026-07-18 · 3 CVEs total

IV. Related Vulnerabilities

V. Comments for CVE-2026-16076

Leave a comment