Authorization Bypass Through User-Controlled Key

Overview AstrBot is a 易上手的多平台 LLM 聊天机器人及开发框架 Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key via the astrmainagent function in the file astrbot/core/astrmainagent.py. An attacker can gain unauthorized access to resources by manipulating the...