CVE-2025-48957 AstrBot Has Path Traversal Vulnerability in /api/chat/get_file

🗓️ 02 Jun 2025 11:16:14Reported by GoogleType

osv

osv🔗 osv.dev👁 4 Views

Path traversal vulnerability in AstrBot may lead to information disclosure; upgrade to version 3.5.13.

Reporter	Title	Published	Views	Family All 13
Circl	CVE-2025-48957	2 Jun 202512:01	–	circl
CNNVD	AstrBot 安全漏洞	2 Jun 202500:00	–	cnnvd
CVE	CVE-2025-48957	2 Jun 202511:16	–	cve
Cvelist	CVE-2025-48957 AstrBot Has Path Traversal Vulnerability in /api/chat/get_file	2 Jun 202511:16	–	cvelist
EUVD	EUVD-2025-16634	3 Oct 202520:07	–	euvd
Github Security Blog	AstrBot Has Path Traversal Vulnerability in /api/chat/get_file	4 Jun 202523:54	–	github
NVD	CVE-2025-48957	2 Jun 202512:15	–	nvd
OSV	GHSA-CQ37-G2QP-3C2P AstrBot Has Path Traversal Vulnerability in /api/chat/get_file	4 Jun 202523:54	–	osv
Positive Technologies	PT-2025-23500 · Astrbot · Astrbot	2 Jun 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-48957	4 Jun 202511:20	–	redhatcve

Source	Link
vicarius	www.vicarius.io/vsociety/posts/cve-2025-48957-detect-astrbot-dashboard-vulnerability
vicarius	www.vicarius.io/vsociety/posts/cve-2025-48957-mitigate-astrbot-dashboard-vulnerability
github	www.github.com/AstrBotDevs/AstrBot/security/advisories/GHSA-cq37-g2qp-3c2p
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2025/48xxx/CVE-2025-48957.json
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-48957
github	www.github.com/AstrBotDevs/AstrBot/issues/1675
github	www.github.com/AstrBotDevs/AstrBot/commit/cceadf222c46813c7f41115b40d371e7eb91e492
github	www.github.com/AstrBotDevs/AstrBot/pull/1676

02 Apr 2026 12:51Current

6.3Medium risk

Vulners AI Score6.3

CVSS 3.17.5

EPSS0.01059

path traversal vulnerability information disclosure upgrade recommendation version three point five thirteen astrbot security