CVE-2025-55449

AstrBotDevs AstrBot 3.5.15 has AdvancedSystemforTextResponseandBotOperationsTool as the hardcoded private key used to sign a JWT...

CVE-2025-55449

AstrBot versions up to 3.5.17 are vulnerable to Remote Code Execution (RCE) due to a hardcoded JWT signing key (Advanced_System_for_Text_Response_and_Bot_Operations_Tool). This oversight allows attackers to forge valid authentication tokens to bypass security mechanisms. Once authenticated, an at...

CVE-2025-55449

AstrBotDevs AstrBot 3.5.15 has AdvancedSystemforTextResponseandBotOperationsTool as the hardcoded private key used to sign a JWT...

Exploit for CVE-2025-55449

CVE-2025-55449 - AstrBot Remote Code Execution RCE Vulnerabi...