Improper Authorization

Overview AstrBot is a 易上手的多平台 LLM 聊天机器人及开发框架 Affected versions of this package are vulnerable to Improper Authorization via the FutureTaskTool.call function in the Scheduled Task Handler process. An attacker can gain unauthorized access to sensitive operations by manipulating the payload"note"...

PT-2026-57544

Name of the Vulnerable Software and Affected Versions AstrBotDevs AstrBot versions prior to 4.25.3 Description An improper authorization issue exists in the Scheduled Task Handler component within the FutureTaskTool.call function of the astrbot/core/tools/cron tools.py file. A remote attacker can...