CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

8 matches found

RedhatCVE•added 2026/06/05 7:48 p.m.•7 views

CVE-2026-10210

A vulnerability was found in AstrBotDevs AstrBot 4.23.6. Affected by this vulnerability is the function sanitizepromptdescription of the file astrbot/core/skills/skillmanager.py. The manipulation results in injection. The attack may be performed from remote. The exploit has been made public and...

6.5CVSS6.1AI score0.00228EPSS

Exploits0References1

ATTACKERKB•added 2026/06/01 1:0 a.m.•7 views

CVE-2026-10210

6.5CVSS6.2AI score0.00228EPSS

Exploits0References5Affected Software1

Vulnrichment•added 2026/06/01 1:0 a.m.•8 views

CVE-2026-10210 AstrBotDevs AstrBot skill_manager.py _sanitize_prompt_description injection

6.5CVSS6.2AI score0.00228EPSS

Exploits0References5

Cvelist•added 2026/06/01 1:0 a.m.•33 views

CVE-2026-10210 AstrBotDevs AstrBot skill_manager.py _sanitize_prompt_description injection

6.5CVSS0.00228EPSS

Exploits0References5

CVE•added 2026/06/01 1:0 a.m.•24 views

CVE-2026-10210

The CVE affects AstrBotDevs AstrBot 4.23.6. The vulnerable component is the function _sanitize_prompt_description in astrbot/core/skills/skill_manager.py, where input handling allows injection due to improper sanitization. This vulnerability is reachable over a network (remote exploit) and, per t...

6.5CVSS6.2AI score0.00228EPSS

Exploits0References5

CNNVD•added 2026/06/01 12:0 a.m.•6 views

AstrBot 安全漏洞

AstrBot is an open-source multi-platform LLM chatbot and development framework created by AstrBot. Version 4.23.6 of AstrBot contains a security vulnerability, which stems from an injection vulnerability in the sanitizepromptdescription function located in the astrbot/core/skills/skillmanager.py...

6.5CVSS6.3AI score0.00228EPSS

Exploits0References5