Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

astrbotdevs/astrbot

              master @ 756469a
            

Fixes

CVEs

HIGH

Peak severity

30.3%

Coverage

Highlights

Auth Bypass: 18 prior fixes. Scrutinize any change in this area.

astrbot/core/pipeline/waking_check/stage.py: most-fixed (4 issues). Treat as high-risk during review.

35 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Path Traversal: The get_file and save_file operations in the chat endpoint historically lacked proper path canonicalization and prefix validation, allowing attackers to read or write arbitrary files outside the designated attachments scope. This vulnerability class is heavily recurring in the codebase.

Hardcoded Secret: AstrBot historically used a static, hardcoded JWT signing key ('Advanced_System_for_Text_Response_and_Bot_Operations_Tool') for dashboard session token validation, allowing attackers to easily forge admin session tokens. This issue is tracked under CVE-2025-55449.

Auth Bypass: A series of flaws in the permission filter and waking check logic allowed unauthorized command and sub-command execution by failing to halt events or handle the permission_not_pass flags properly. This bypassed administrative execution restrictions.