PT-2026-60919

Name of the Vulnerable Software and Affected Versions AstrBot versions prior to 4.25.6 Description An authorization bypass exists in the session-listing endpoint. The issue resides in the OpenApiRoute.get chat sessions function within the astrbot/dashboard/routes/open api.py file. A remote attack...