CVE-2026-17530— AstrBotDevs AstrBot Subagent astr_agent_tool_exec.py _build_handoff_toolset authorization
Possible ATT&CK Techniques 1AI
T1190 · Exploit Public-Facing ApplicationAffected Version Matrix 6
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| AstrBotDevs | AstrBot | 4.25.0 | affected |
4.25.1 | affected | ||
4.25.2 | affected | ||
4.25.3 | affected | ||
4.25.4 | affected | ||
4.25.5 | affected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-17530
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
AstrBotDevs AstrBot Subagent astr_agent_tool_exec.py _build_handoff_toolset authorization
Source: CVE Program / CVE List V5
Vulnerability Description
A security flaw has been discovered in AstrBotDevs AstrBot up to 4.25.5. Affected by this vulnerability is the function _build_handoff_toolset of the file AstrBot/astrbot/core/astr_agent_tool_exec.py of the component Subagent. The manipulation results in incorrect authorization. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks. The patch is identified as d23011262e8e75e1ec41b0f1f0091493a022327e. A patch should be applied to remediate this issue.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
授权机制不正确
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| AstrBotDevs | AstrBot | 4.25.0 | cpe:2.3:a:astrbot:astrbot:*:*:*:*:*:*:*:* |
II. Public POCs for CVE-2026-17530
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-17530
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-17530 (2)
Proof of Concept for CVE-2026-17530 (1)
Other References for CVE-2026-17530 (1)
IV. Related Vulnerabilities
Same product: AstrBot
- CVE-2026-17529
AstrBotDevs AstrBot astr_main_agent.py authorization - CVE-2026-16077
AstrBotDevs AstrBot Filesystem Computer-Use Tool fs.py _norm - CVE-2026-16076
AstrBotDevs AstrBot API open_api.py OpenApiRoute.chat_send a - CVE-2026-16075
AstrBotDevs AstrBot session-listing Endpoint open_api.py Ope - CVE-2026-16074
AstrBotDevs AstrBot Plugin Update plugin.py update_all_plugi
Same vendor: AstrBotDevs
- CVE-2026-17529
AstrBotDevs AstrBot astr_main_agent.py authorization - CVE-2026-16077
AstrBotDevs AstrBot Filesystem Computer-Use Tool fs.py _norm - CVE-2026-16076
AstrBotDevs AstrBot API open_api.py OpenApiRoute.chat_send a - CVE-2026-16075
AstrBotDevs AstrBot session-listing Endpoint open_api.py Ope - CVE-2026-16074
AstrBotDevs AstrBot Plugin Update plugin.py update_all_plugi
Same weakness: CWE-863
- CVE-2026-50749
Apache Answer: Missing authorization in revision audit rejec - CVE-2026-71247
Documenso: Assistant Recipient Can Forge Another Signer's Si - CVE-2026-71234
Documize Community: Attachment Download Authorization Bypass - CVE-2026-71201
OpenStack Ironic 38.0.0越权访问漏洞 - CVE-2026-71192
OpenStack Swift越权读取：S3API中间件未清理控制头
V. Comments for CVE-2026-17530
No comments yet