Lucene search
+L

6 matches found

NVD
NVD
added 2026/07/27 4:17 p.m.11 views

CVE-2026-17530

A security flaw has been discovered in AstrBotDevs AstrBot up to 4.25.5. Affected by this vulnerability is the function buildhandofftoolset of the file AstrBot/astrbot/core/astragenttoolexec.py of the component Subagent. The manipulation results in incorrect authorization. The attack may be...

6.5CVSS0.00358EPSS
SaveExploits0References8
OSV
OSV
added 2026/07/27 3:45 p.m.7 views

CVE-2026-17530 AstrBotDevs AstrBot Subagent astr_agent_tool_exec.py _build_handoff_toolset authorization

A security flaw has been discovered in AstrBotDevs AstrBot up to 4.25.5. Affected by this vulnerability is the function buildhandofftoolset of the file AstrBot/astrbot/core/astragenttoolexec.py of the component Subagent. The manipulation results in incorrect authorization. The attack may be...

5.3CVSS6.2AI score
SaveExploits0References10
Cvelist
Cvelist
added 2026/07/27 3:45 p.m.35 views

CVE-2026-17530 AstrBotDevs AstrBot Subagent astr_agent_tool_exec.py _build_handoff_toolset authorization

A security flaw has been discovered in AstrBotDevs AstrBot up to 4.25.5. Affected by this vulnerability is the function buildhandofftoolset of the file AstrBot/astrbot/core/astragenttoolexec.py of the component Subagent. The manipulation results in incorrect authorization. The attack may be...

6.5CVSS0.00358EPSS
SaveExploits0References8
ATTACKERKB
ATTACKERKB
added 2026/07/27 3:45 p.m.10 views

CVE-2026-17530

A security flaw has been discovered in AstrBotDevs AstrBot up to 4.25.5. Affected by this vulnerability is the function buildhandofftoolset of the file AstrBot/astrbot/core/astragenttoolexec.py of the component Subagent. The manipulation results in incorrect authorization. The attack may be...

6.5CVSS6.2AI score0.00358EPSS
SaveExploits0References8Affected Software1
CVE
CVE
added 2026/07/27 3:45 p.m.27 views

CVE-2026-17530

AstrBotDevs AstrBot (up to v4.25.5) contains a vulnerability in the Subagent component where the function _build_handoff_toolset (file AstrBot/astrbot/core/astr_agent_tool_exec.py) allows manipulation that leads to incorrect authorization . The flaw can be remotely exploited and has been publicly...

6.5CVSS6.2AI score0.00358EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2026/07/27 12:0 a.m.19 views

PT-2026-64992

A security flaw has been discovered in AstrBotDevs AstrBot up to 4.25.5. Affected by this vulnerability is the function build handoff toolset of the file AstrBot/astrbot/core/astr agent tool exec.py of the component Subagent. The manipulation results in incorrect authorization. The attack may be...

6.5CVSS6.2AI score0.00358EPSS
SaveExploits0References9
Rows per page
Query Builder