Description
No description available.
AstrBot 身份验证缺陷 可导致远程代码执行
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.secrss.com/articles/85082
https://avd.aliyun.com/detail?id=AVD-2025-55449
https://zhuanlan.zhihu.com/p/1974146792665927764
https://www.gm7.org/archives/1196
https://www.secevery.com/toBugInfo?id=1990304487194763265
https://github.com/Marven11/CVE-2025-55449-AstrBot-RCE
https://advisories.gitlab.com/pypi/astrbot/CVE-2025-55449/
https://osv.dev/vulnerability/GHSA-4m32-cjv7-f425
https://adg.csdn.net/69523fe85b9f5f31781b444b.html